- Announce - libvirt List Archives

[Libvirt-announce] Entering freeze for 1.2.1
by Daniel Veillard 14 Jan '14

14 Jan '14

As planned, I just tagged Release Candidate 1 for libvirt and libvirt-python in git and pushed tarballs to the usual places: ftp://libvirt.org/libvirt ftp://libvirt.org/libvirt/python I think I will make a release candidate 2 during the week-end or early monday, to target a release on the 15th. Please give it a try ! thanks, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

2 2

[Libvirt-announce] Release of libvirt-python-1.2.0
by Daniel Veillard 31 Dec '13

31 Dec '13

So this is the first release fo the separated libvirt-python code base out of the main libvirt git. In this case the two release have been made in tandem to avoid disruptions, but there is no guarantee that the future releases of both project will be bound together (though I will try to sync those to minimize churn when possible !) Tarball and rpms are now available on the new location: ftp://libvirt.org/libvirt/python/ The release obviously is mostly around making the switch to an independant package, and making sure that this will build on older version of libvirt already released. Hence a very large set of the patches are specific to portability issues: Features: - Separating libvirt-python releases from libvirt releases (Daniel P. Berrange and Doug Goldstein) - Add missing binding of security model/label APIs (Daniel P. Berrange) Bug Fixes: - Return right error code for baselineCPU (Don Dugger) - Add missing break to switch-case block (Doug Goldstein) Documentation: - Update README file contents and add HACKING file (Daniel P. Berrange) Portability: - Deal with old filenames for events/error functions (Daniel P. Berrange) - Ensure API overrides only used if API exists (Daniel P. Berrange) - Relax min required libvirt to version 0.9.11 (Daniel P. Berrange) - virConnectGetCPUModelNames API appeared in 1.1.3 (Doug Goldstein) - VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED appeared in 1.1.1 (Daniel P. Berrange) - virDomainCreateXMLWithFiles and virDomainCreateWithFiles APIs appeared in 1.1.1 (Doug Goldstein) - virDomainMigrate3 and virDomainMigrateToURI3 appeared in 1.1.0 (Doug Goldstein) - virTypedParams* API appeared in 1.0.2 and used in 1.1.0 (Doug Goldstein) - virDomainMigrateGetCompressionCache API appeared in 1.0.3 (Doug Goldstein) - virDomainGetJobStats API appeared in 1.0.3 (Doug Goldstein) - virNodeGetCPUMap API appeared in 1.0.0 (Doug Goldstein) - VIR_DOMAIN_EVENT_ID_PMSUSPEND_DISK appeared in 1.0.0 (Daniel P. Berrange) - virStoragePoolListAllVolumes API appeared in 0.10.2 (Doug Goldstein) - virNode{Get,Set}MemoryParameters API appeared in 0.10.2 (Doug Goldstein) - virConnectListAll* APIs appeared in 0.10.2 (Doug Goldstein) - virDomainQemuAgentCommand appeared in 0.10.0 (Daniel P. Berrange) - virDomainPinEmulator and virDomainGetEmulatorPinInfo APIs appeared in 0.10.0 (Doug Goldstein) - VIR_DOMAIN_EVENT_ID_BALLOON_CHANGED appeared in 0.10.0 (Daniel P. Berrange) - virConnect{Unr,R}egisterCloseCallback API appeared in 0.10.0 (Doug Goldstein) - virDomainSnapshotListAllChildren API appeared in 0.9.13 (Doug Goldstein) - virConnectListAllDomains API appeared in 0.9.13 (Doug Goldstein) - virDomainListAllSnapshots API appeared in 0.9.13 (Doug Goldstein) - Don't build LXC module when building less than 1.0.2 (Doug Goldstein) Improvements: - Improve quality of sanitytest check (Daniel P. Berrange) - Skip copying manually written python for C APIs which don't exist (Daniel P. Berrange) - Fix misc RPM specfile flaws (Daniel P. Berrange) - Fix code for avoiding overrides of non-existant functions (Daniel P. Berrange) - Avoid generating the methods in multiple classes (Daniel P. Berrange) - Make block pull event dispatcher private (Daniel P. Berrange) - Don't include virDomainSnapshotRef in python API (Daniel P. Berrange) - Call virGetLastError from mod rather than py wrapper (Doug Goldstein) - Make setup.py executable (Martin Kletzander) - maint: next release is 1.2.0 (Eric Blake) - Create array of modules to be built (Doug Goldstein) - Break generator.py to be called per module (Doug Goldstein) - Setup distutils build system (Daniel P. Berrange) - Add execute permission for sanitytest.py (Daniel P. Berrange) - Add build/ to python module path for sanitytest.py (Daniel P. Berrange) - Import some virTypedParams* APIs from libvirt (Doug Goldstein) - Import LIBVIR_CHECK_VERSION macro from libvirt (Doug Goldstein) - Import VIR_FORCE_CLOSE macro from libvirt (Daniel P. Berrange) - Remove use of virStrcpyStatic (Daniel P. Berrange) - Import VIR_ALLOC / VIR_ALLOC_N / VIR_REALLOC_N functions (Daniel P. Berrange) - Import code annotation macros from libvirt (Daniel P. Berrange) - Import gnulib's ignore_value macro (Daniel P. Berrange) - Import gnulib's xalloc_oversized macro (Daniel P. Berrange) - Add decl of MIN macro (Daniel P. Berrange) - Import STREQ macro from libvirt (Daniel P. Berrange) - Update header file includes (Daniel P. Berrange) - Update generator for new code layout (Daniel P. Berrange) - Remove obsolete Makefile.am (Daniel P. Berrange) - Move python example programs into python/examples/ subdirectory (Daniel P. Berrange) Cleanups: - Mostly revert "python: remove virConnectGetCPUModelNames from globals" (Daniel P. Berrange) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - maint: fix comma style issues: python (Eric Blake) thanks everybody for your contributions to this release, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

3 2

[Libvirt-announce] SECURITY: CVE-2013-6436: libvirtd daemon crash when reading memory tunables for LXC guest in shutoff status
by Daniel P. Berrange 20 Dec '13

20 Dec '13

Libvirt Security Notice ======================= Summary: libvirtd daemon crash when reading memory tunables for LXC guest in shutoff status Reported on: 20131209 Published on: 20131220 Fixed on: 20131220 Reported by: Martin Kletzander <mkletzan(a)redhat.com> Patched by: Martin Kletzander <mkletzan(a)redhat.com> See also: CVE-2013-6436 Description ----------- The lxcDomainGetMemoryParameters method in the LXC driver did not check whether the guest being accessed was running or not. When shutoff there will be no virCgroupPtr instance associated with the guest. Reading memory tunables involves calling methods with the virCgroupPtr object as a parameter. This will lead to a crash accessing a NULL pointer. Impact ------ A user who has permission to invoke the virDomainGetMemoryParameters API against the LXC driver will be able to crash the libvirtd daemon. Access to this API is granted to any user who connects to the read-only libvirtd UNIX domain socket. If ACLs are active, access is granted to any user with the 'read' permission on the 'domain' object, which is granted by default to all users. As a result an unprivileged user will be able to inflict a denial of service attack on other users of the libvirtd daemon with higher privilege. Workaround ---------- The impact can be mitigated by blocking access to the read-only libvirtd UNIX domain socket, with policykit or the 'auth_unix_ro' parameter in '/etc/libvirt/libvirtd.conf'. If ACLs are active, the 'read' permission should be removed from any untrusted users. This will not prevent the crash, but will stop unprivileged users from inflicting the denial of service on higher privileged users. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git Branch: master Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: f8c1cb90213508c4f32549023b0572ed774e48aa Branch: v1.0.5-maint Broken in: v1.0.5 Broken in: v1.0.5.1 Broken in: v1.0.5.2 Broken in: v1.0.5.3 Broken in: v1.0.5.4 Broken in: v1.0.5.5 Broken in: v1.0.5.6 Broken in: v1.0.5.7 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 218bd2e8716bcb4c90acf6ecaf879d606b46606b Branch: v1.0.6-maint Broken in: v1.0.6 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 80d682fd90bb7e97d8670be4cba1fe153438d7a0 Branch: v1.1.0-maint Broken in: v1.1.0 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 30a589bc4731488ca3428515ed57ce5446a83bbd Branch: v1.1.1-maint Broken in: v1.1.1 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 9a68d1354233f4cfca686655f8021e9477977e6e Branch: v1.1.2-maint Broken in: v1.1.2 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 79384018480f11ec6f2c2196039e67a9196d3e3a Branch: v1.1.3-maint Broken in: v1.1.3 Broken in: v1.1.3.1 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 66247dc5fffe5b9447f4db377c5adf02e6db97c4 Branch: v1.1.4-maint Broken in: v1.1.4 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 09956c7db764a0958034de6fac58aaaaf8e878bf Branch: v1.2.0-maint Broken in: v1.2.0 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 705f388bceb4fce21b7c5ebc6310cb467c362239 Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.0.5.8 maintenance release
by Cole Robinson 14 Dec '13

14 Dec '13

libvirt 1.0.5.8 maintenance release is now available. This is libvirt 1.0.5 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.0.5.8.tar.gz Changes in this version: * Tie SASL callbacks lifecycle to virNetSessionSASLContext * spec: Don't save/restore running VMs on libvirt-client update * Return right error code for baselineCPU * spec: Don't save/restore running VMs on libvirt-client update * Fix busy wait loop in LXC container I/O handling * libvirt-guests: Run only after libvirtd * Don't depend on syslog.service * libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities * util: recognize SMB/CIFS filesystems as shared * Disable nwfilter driver when running unprivileged * spec: Explicitly require libgcrypt-devel For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.2 maintenance release
by Cole Robinson 14 Dec '13

14 Dec '13

libvirt 1.1.3.2 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.2.tar.gz Changes in this version: * Tie SASL callbacks lifecycle to virNetSessionSASLContext * spec: Don't save/restore running VMs on libvirt-client update * Return right error code for baselineCPU * qemu: hotplug: Fix adding USB devices to the driver list * qemu: hotplug: Fix double free on USB collision * qemu: hotplug: Only label hostdev after checking device conflicts * qemu: hotplug: Mark 2 private functions as static * qemu: Call qemuSetupHostdevCGroup later during hotplug * qemu: hostdev: Refactor PCI passhrough handling * qemu: snapshot: Detect internal snapshots also for sheepdog and RBD * spec: Don't save/restore running VMs on libvirt-client update * Fix busy wait loop in LXC container I/O handling * libvirt-guests: Run only after libvirtd * Don't depend on syslog.service * Fix migration with QEMU 1.6 * libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities * util: recognize SMB/CIFS filesystems as shared * Disable nwfilter driver when running unprivileged * qemu: don't use deprecated -no-kvm-pit-reinjection * qemu: Don't access vm->priv on unlocked domain * virpci: Don't error on unbinded devices * virSecurityLabelDefParseXML: Don't parse label on model='none' For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] Perl binding Sys-Virt release 1.2.0
by Daniel P. Berrange 04 Dec '13

04 Dec '13

I am pleased to announce that release 1.2.0 of Sys-Virt, the libvirt Perl API binding is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-1.2.0.tar.gz Changed in the 1.2.0 release: - Add all new constants in libvirt 1.2.0 - Fix reversed args for virNodeDeviceLookupSCSIHostByWWN Further information, including online API documentation & previous release archives, is available from the CPAN home page http://search.cpan.org/dist/Sys-Virt/ Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of libvirt-1.2.0
by Daniel Veillard 02 Dec '13

02 Dec '13

Technically this is also the first release of libvirt-python as this is the major change leading to the bump in middle version number. The libvirt tarballs and rpms are available at the usual place: ftp://libvirt.org/libvirt/ while libvirt-python-1.2.0 tarball and rpms are in the new location: ftp://libvirt.org/libvirts of course both git trees are now tagged and development can resume. The other 2 major user visible features are support for gluster pools at the storage level and support for VBox 4.3 . This is otherwise a relatively small release with less than 200 commits with a balanced ratio of bug fixes and improvements: Features: - Add support for gluster pool (Eric Blake) - Remove python binding (Daniel P. Berrange) - vbox: add support for 4.3 APIs (Ryota Ozaki) Documentation: - fix typos in libvirt.h.in (Chen Hanxiao) - Link libvirt-sandbox from apps page (Daniel P. Berrange) - Add docs about audit subsystem logging (Daniel P. Berrange) - virsh: fix doc typos (Nehal J Wani) - Fix typos in various docs (Nehal J Wani) - LXC: add securetty related note in Device nodes (Gao feng) - Fix three minor typos (Yuri Chornoivan) - storage: fix typo in previous patch (Eric Blake) - storage: document gluster pool (Eric Blake) - virDomainReboot: Document that migration might be unsafe (Michal Privoznik) - delete extra character (Wangyufei (A)) - maint: fix comment typos. (Eric Blake) - improve job info details (Eric Blake) - fix a typo in formatnwfilter.html.in (Chen Hanxiao) - Improve cgroups docs to cover systemd integration (Daniel P. Berrange) - fix typos in libvirt.h.in (Chen Hanxiao) - fix virDomainRestoreFlags description bug (Wang Yufei) - grammar fixes (Eric Blake) - add SystemTap to apps using libvirt (Jonathan Lebon) - fix a typo in formatnwfilter (Chen Hanxiao) - caps: Fix function docs for virCapabilitiesAddHostNUMACell (Peter Krempa) Portability: - tests: fix virpcitest with read-only srcdir (Eric Blake) - tests: guarantee abs_srcdir in all C tests (Eric Blake) - look for numad in /usr/sbin (Jim Fehlig) - build: Don't fail on '<' or '>' with old xmllint (Martin Kletzander) - spec: fix libvirt-docs subpackage on RHEL-6 (Michael Chapman) - Don't depend on syslog.service (Guido Günther) - qemuMonitorJSONGetCPUx86Data: Don't fail on ancient qemus (Michal Privoznik) - build: work around super-old readline.h (Ryota Ozaki) - Fix migration with QEMU 1.6 (Michael Avdienko) - nodeinfo: fix build on non-Linux (Eric Blake) Bug Fixes: - vbox: handle errors of virDomainHostdevDefAlloc correctly (Ryota Ozaki) - vbox: fix incorrect loop condition in vboxHostDeviceGetXMLDesc (Ryota Ozaki) - Fix memory leak in virNWFilterDefParseXML() (Nehal J Wani) - Fix memory leak in virDomainDefParseXML() (Nehal J Wani) - LXC: Ensure security context is set when mounting images (Daniel P. Berrange) - network: properly update iptables rules during net-update (Laine Stump) - Fix bug in identifying sub-mounts (Daniel P. Berrange) - storage: skip selinux cleanup when fd not available (Eric Blake) - qemu: preserve netdev MAC address during 'domxml-to-native' (Bing Bu Cao) - storage: don't read storage volumes in nonblock mode (Eric Blake) - LXC: don't unmount mounts for shared root (Gao feng) - LXC: fix the problem that libvirt lxc fail to start on latest kernel (Gao feng) - sasl: Fix authentication when using PLAIN mechanism (Christophe Fergeau) - Fix invalid read in virNetSASLSessionClientStep debug log (Christophe Fergeau) - Tie SASL callbacks lifecycle to virNetSessionSASLContext (Christophe Fergeau) - remote: Don't leak priv->tls object on connection failure (Christophe Fergeau) - spec: Don't save/restore running VMs on libvirt-client update (Jiri Denemark) - virsh domxml-from-native to treat SCSI as the bus type for pseries by default (Shivaprasad G Bhat) - Don't start a nested job in qemuMigrationPrepareAny (Ján Tomko) - spec: Don't save/restore running VMs on libvirt-client update (Cole Robinson) - spec: Restrict virt-login-shell usage (Jiri Denemark) - storage: use valid XML for awkward volume names (Eric Blake) - storage: Returns earlier if source adapter of the scsi pool is a HBA (Osier Yang) - libvirt-guests: Run only after libvirtd (Cole Robinson) - Fix off-by-1 in default SELinux MCS range (Daniel P. Berrange) - vbox: fix segfault on virsh dumpxml with the existence of USB filters (Ryota Ozaki) - Add missing 'return 0;' in stub lxcStartFuse() method impl. (Daniel P. Berrange) - Avoid async signal safety problem in glibc's setxid (Daniel P. Berrange) - Don't release spice port twice when no TLS port is available (Ján Tomko) - Properly unref a connection with a close callback (Ján Tomko) - qemu: Call qemuSetupHostdevCGroup later during hotplug (Jiri Denemark) - qemuMonitorIO: Don't use @mon after it's unrefed (Michal Privoznik) - qemuProcessReconnectHelper: Don't create joinable thread (Michal Privoznik) - virDomainEventCallbackListFree: Don't leak @list->callbacks (Michal Privoznik) - networkBuildDhcpDaemonCommandLine: Don't leak @configstr and @configfile (Michal Privoznik) - Disable nwfilter driver when running unprivileged (Ján Tomko) - libxl: Fix Xen 4.4 libxlVmStart logic (Jason Andryuk) - qemu: Check for presence of device and properities when getting CPUID (Peter Krempa) - Fix busy wait loop in LXC container I/O handling (Daniel P. Berrange) - Don't expose 'none' machine type to capabilities (Daniel P. Berrange) - Fix mem leak in virQEMUCapsProbeQMPMachineTypes on OOM (Daniel P. Berrange) - virSecurityLabelDefParseXML: Don't parse label on model='none' (Michal Privoznik) - virsh-domain: Mark --live and --config mutually exclusive in vcpucount (Peter Krempa) - qemu: Fix SCSI hotplug on pseries guests (Vitor de Lima) - pci: properly handle out-of-order SRIOV virtual functions (Laine Stump) - util: use -w flag when calling iptables (Serge Hallyn) - storage: Fix a vol-clone bug on ppc64 (Li Zhang) - qemu: Don't access vm->priv on unlocked domain (Michal Privoznik) - qemu: Avoid double free of VM (Michal Privoznik) - Allow root directory in filesystem source dir schema (Ján Tomko) - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (Michal Privoznik) - conf: fix incorrect error log in virCPUDefIsEqual (Chen Hanxiao) - qemuMonitorDispose: Reset lastError (Michal Privoznik) - qemu: clean up migration ports when migration cancelled (Zeng Junliang) - network: fix connections count in case of allocate failure (Laine Stump) - virpcitest: Fix variable arguments using in pci_driver_new (Michal Privoznik) - virpci: Don't error on unbinded devices (Michal Privoznik) Improvements: - Pull lxcContainerGetSubtree out into shared virfile module (Daniel P. Berrange) - Introduce standard methods for sorting strings with qsort (Daniel P. Berrange) - conf: Export virStorageVolType enum helper functions (Peter Krempa) - sasl: Replace 'restep' label with 'continue' (Christophe Fergeau) - storage: probe qcow2 volumes in gluster pool (Eric Blake) - storage: improve handling of symlinks in gluster (Eric Blake) - storage: improve allocation stats reported on gluster files (Eric Blake) - storage: improve directory support in gluster pool (Eric Blake) - storage: add network-dir as new storage volume type (Eric Blake) - storage: implement rudimentary glusterfs pool refresh (Eric Blake) - storage: initial support for linking with libgfapi (Eric Blake) - storage: expose volume meta-type in XML (Eric Blake) - storage: allow interleave in volume XML (Eric Blake) - maint: next release is 1.2.0 (Eric Blake) - vbox: import vbox_CAPI_v4_3.h from SDK (Ryota Ozaki) - vbox: pull vboxHostDeviceGetXMLDesc out from vboxDomainGetXMLDesc (Ryota Ozaki) - vbox: cleanup vboxAttachUSB (Ryota Ozaki) - lxc: don't do duplicate work when getting pagesize (Chen Hanxiao) - maint: update to latest gnulib (Eric Blake) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - qemu: Auto-generate controller for hotplugged hostdev (Eric Farman) - qemu: Separate calls based on controller bus type (Eric Farman) - qemu: Rename controller hotplug functions to not be PCI-specific (Eric Farman) - qemu: Add support for virt machine type with virtio-mmio devices on armv7 (Clark Laughlin) - maint: enforce comma style usage (Eric Blake) - maint: fix comma style issues: remaining code (Eric Blake) - maint: fix comma style issues: remaining drivers (Eric Blake) - maint: fix comma style issues: vbox (Eric Blake) - maint: fix comma style issues: python (Eric Blake) - maint: fix comma style issues: util (Eric Blake) - maint: fix comma style issues: tests, tools (Eric Blake) - maint: fix comma style issues: qemu (Eric Blake) - maint: fix comma style issues: xen (Eric Blake) - maint: fix comma style issues: conf (Eric Blake) - maint: fix comma style issues: nwfilter (Eric Blake) - Error out on unterminated arrays and objects in JSON parser (Ján Tomko) - Test if JSON parser fails on invalid input (Ján Tomko) - maint: ship .pl scripts as executables (Eric Blake) - Fix virsh net-info output for consistency (Hao Liu) - Add missing break to switch-case block (Doug Goldstein) - qemumonitorjsontest: Introduce GetNonExistingCPUData test (Michal Privoznik) - Macro for testing the version you are compiling with (Doug Goldstein) - Return -1 in virPortAllocatorAcquire if all ports are used (Ján Tomko) - Add a name to virPortAllocator (Ján Tomko) - storage: fix RNG validation of gluster via netfs (Eric Blake) - virsh-secret: Unify list column alignment (Peter Krempa) - virsh-interface: Unify list column alignment (Peter Krempa) - virsh-nwfilter: Unify list command column alignment (Peter Krempa) - virsh-pool: Unify spacing of listing function (Peter Krempa) - qemu: Change return type of qemuMonitorGetGuestCPU() (Peter Krempa) - virsh-volume: Unify strigification of volume type (Peter Krempa) - virsh-volume: Unify alignment of vol-list output columns (Peter Krempa) - conf: Refactor virDomainDiskSourceDefParse (Peter Krempa) - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (Peter Krempa) - conf: Split out code to parse the source of a disk definition (Peter Krempa) - qemuDomainObjStart: Warn on corrupted image (Michal Privoznik) - util: use size_t instead of unsigned int for num_virtual_functions (Laine Stump) - qemu: assign PCI address to primary video card (Vitor de Lima) - qemu: process: Validate specific CPUID flags of a guest (Peter Krempa) - qemu: Add support for paravirtual spinlocks in the guest (Peter Krempa) - conf: Refactor storing and usage of feature flags (Peter Krempa) - cpu: x86: Add internal CPUID features support and KVM feature bits (Peter Krempa) - qemu: Add monitor APIs to fetch CPUID data from QEMU (Jiri Denemark) - cpu_x86: Refactor storage of CPUID data to add support for KVM features (Peter Krempa) - tests: Distribute virpcitestdata (Michal Privoznik) - tests: Fix virtpcitest in VPATH (Jiri Denemark) - conf: Refactor virDomainDiskSourcePoolDefParse (Peter Krempa) - storage: always probe type with buffer (Eric Blake) - storage: refactor backing chain division of labor (Eric Blake) - storage: reduce number of stat calls (Eric Blake) - storage: avoid short reads while chasing backing chain (Eric Blake) - storage: use simpler 'char *' (Eric Blake) - test driver: add support for .connectBaselineCPU (Giuseppe Scrivano) - virpcitest: Introduce testVirPCIDeviceReset (Michal Privoznik) - virt-login-shell: also build virAtomic.h (Guido Günther) - storage: recognize gluster as networked file (Eric Blake) - qemu: don't use deprecated -no-kvm-pit-reinjection (Ján Tomko) - Resolve Coverity issue regarding not checking return value (John Ferlan) - Skip any files which are not mounted on the host (Daniel P. Berrange) - Add flag to lxcBasicMounts to control use in user namespaces (Daniel P. Berrange) - Remove duplicate entries in lxcBasicMounts array (Daniel P. Berrange) - Remove pointless 'srcpath' variable in lxcContainerMountBasicFS (Daniel P. Berrange) - Remove unused 'opts' field from LXC basic mounts struct (Daniel P. Berrange) - Add virFileIsMountPoint function (Daniel P. Berrange) - virpcitest: Introduce check for unbinded devices (Michal Privoznik) - virpcitest: Introduce testVirPCIDeviceReattach (Michal Privoznik) - virpcitest: Test virPCIDeviceDetach (Michal Privoznik) - tests: Introduce virpcitest (Michal Privoznik) - cpu: x86: Parse the CPU feature map only once (Peter Krempa) - cpu: Export few x86-specific APIs (Jiri Denemark) - nodeinfo: Remove libnuma include (Peter Krempa) - numa: Add wrapper of numa_node_to_cpus and use it (Peter Krempa) - numa: Replace NUMA_MAX_N_CPUS macro with virNumaGetMaxCPUs() (Peter Krempa) - nodeinfo: Get rid of nodeGetCellMemory (Peter Krempa) - numa: Introduce virNumaGetNodeMemory and use it instead of numa_node_size64 (Peter Krempa) - numa: Introduce virNumaGetMaxNode and use it instead of numa_max_node (Peter Krempa) - nodeinfo: Avoid forward declarations of static functions (Peter Krempa) - numa: Introduce virNumaIsAvailable and use it instead of numa_available (Peter Krempa) Cleanups: - Remove obsolete 'tests' makefile target (Daniel P. Berrange) - Mostly revert "python: remove virConnectGetCPUModelNames from globals" (Daniel P. Berrange) - Remove redundant braces (Ján Tomko) - virPCIDeviceBindToStub: Remove unused @oldDriverPath and @oldDriverName (Michal Privoznik) Thanks to everybody who have helped on this release, with bug reports, fixes, features or documentation updates ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for 1.2.0, rc1 available
by Daniel Veillard 28 Nov '13

28 Nov '13

So as planned we are entering freeze for libvirt-1.2.0, I just tagged the git trees - plural as we now use libvirt-python separate git for this binding - and pushed tarballs and rpms to the usual place at: ftp://libvirt.org/libvirt/ it did allows a correct update at the rpm level for me and virt-manager does work correctly at least with my minimal testing. We now need further reviews, obviously on the portability front especially as the python bindings are a separate tarball. It would be cool to get more testing on specific aspects of the release too, like the gluster pool and VBox 4.3 support. Give it a try, thanks ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] ANNOUNCE: libvirt-sandbox "Cholistan" release 0.5.1
by Daniel P. Berrange 19 Nov '13

19 Nov '13

I pleased to announce the a new public release of libvirt-sandbox, version 0.5.0, is now available for download ftp://libvirt.org/libvirt/sandbox/ The packages are GPG signed with Key fingerprint: DAF3 A6FD B26B 6291 2D0E 8E3F BE86 EBB4 1510 4FDF (4096R) The libvirt-sandbox package provides an API layer on top of libvirt-gobject which facilitates the cration of application sandboxes using virtualization technology. An application sandbox is a virtual machine or container that runs a single application binary, directly from the host OS filesystem. In other words there is no separate guest operating system install to build or manager. At this point in time libvirt-sandbox can create sandboxes using either LXC or KVM, and should in theory be extendable to any libvirt driver. This release focused on exclusively on bugfixing Changed in this release: - Fix path to systemd binary (prefers dir /lib/systemd not /bin) - Remove obsolete commands from virt-sandbox-service man page - Fix delete of running service container - Allow use of custom root dirs with 'virt-sandbox --root DIR' - Fix 'upgrade' command for virt-sandbox-service generic services - Fix logrotate script to use virsh for listing sandboxed services - Add 'inherit' option for virt-sandbox '-s' security context option, to auto-copy calling process' context - Remove non-existant '-S' option froom virt-sandbox-service man page - Fix line break formatting of man page - Mention LIBVIRT_DEFAULT_URI in virt-sandbox-service man page - Check some return values in libvirt-sandbox-init-qemu - Remove unused variables - Fix crash with partially specified mount option string - Add man page docs for 'ram' mount type - Avoid close of un-opened file descriptor - Fix leak of file handles in init helpers - Log a message if sandbox cleanup fails - Cope with domain being missing when deleting container - Improve stack trace diagnostics in virt-sandbox-service - Fix virt-sandbox-service content copying code when faced with non-regular files. - Improve error reporting if kernel does not exist - Allow kernel version/path/kmod to be set with virt-sandbox - Don't overmount '/root' in QEMU sandboxes by default - Fix nosuid / nodev mount options for tmpfs - Force 9p2000.u protocol version to avoid QEMU bugs - Fix cleanup when failing to start interactive sandbox - Create copy of kernel from /boot to allow relabelling - Bulk re-indent of code - Avoid crash when gateway is missing in network options - Fix symlink target created in multi-user.target.wants - Add '-p PATH' option for virt-sandbox-service clone/delete to match 'create' command option. - Only allow 'lxc:///' URIs with virt-sandbox-service until further notice - Rollback state if cloning a service sandbox fails - Add more kernel modules instead of assuming they are all builtins - Don't complain if some kmods are missing, as they may be builtins - Allow --mount to be repeated with virt-sandbox-service Thanks to everyone who contributed to this release Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.1 maintenance release
by Cole Robinson 06 Nov '13

06 Nov '13

libvirt 1.1.3.1 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.1.tar.gz Changes in this version: * Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs * Fix race condition reconnecting to vms & loading configs * Fix leak of objects when reconnecting to QEMU instances * Don't update dom->persistent without lock held * Block all use of libvirt.so in setuid programs * Remove (nearly) all use of getuid()/getgid() * Add stub getegid impl for platforms lacking it * Don't allow remote driver daemon autostart when running setuid * Only allow the UNIX transport in remote driver when setuid * Block all use of getenv with syntax-check * Remove all direct use of getenv * Make virCommand env handling robust in setuid env * Initialize threading & error layer in LXC controller * Fix flaw in detecting log format * Move virt-login-shell into libvirt-login-shell sub-RPM * Set a sane $PATH for virt-login-shell * remote: fix regression in event deregistration * python: Fix Create*WithFiles filefd passing * build: fix build of virt-login-shell on systems with older gnutls * build: fix linking virt-login-shell * Don't link virt-login-shell against libvirt.so (CVE-2013-4400) * Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) * Only allow 'stderr' log output when running setuid (CVE-2013-4400) * Add helpers for getting env vars in a setuid environment * Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) * build: Add lxc testcase to dist list * Convert uuid to a string before printing it * LXC: Fix handling of RAM filesystem size units * qemuMonitorJSONSendKey: Avoid double free * rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X * Remove use of virConnectPtr from all remaining nwfilter code * Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' * Remove virConnectPtr arg from virNWFilterDefParse * qemu: cgroup: Fix crash if starting nographics guest * virNetDevBandwidthEqual: Make it more robust * qemu_hotplug: Allow QoS update in qemuDomainChangeNet * Adjust legacy max payload size to account for header information For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0