- Announce - libvirt List Archives

[Libvirt-announce] ANNOUNCE: Perl binding Sys-Virt release 1.2.3
by Daniel P. Berrange 07 Apr '14

07 Apr '14

I am pleased to announce that release 1.2.3 of Sys-Virt, the libvirt Perl API binding, is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-1.2.3.tar.gz Changed in the 1.2.3 release: - Add VIR_FROM_CRYPTO error constant - Add VIR_MIGRATE_AUTO_CONVERGE migration constant - Add virDomainCoreDumpWithFormat and its constants Further information, including online API documentation & previous release archives, is available from the CPAN home page http://search.cpan.org/dist/Sys-Virt/ Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of python bindings for libvirt 1.2.3
by Daniel Veillard 03 Apr '14

03 Apr '14

With a bit of delay due to a dependancy needing fixing, the python bindings update for 1.2.3 are available, tagged in the libvirt-python git module and for download at the usual place: ftp://libvirt.org/libvirt/python/ It carries a mix of improvements, bugs and portability fixes: Portability: - Fix nosetests usage with python3 (Daniel P. Berrange) - setup.py: Allow running --help or clean without pkg-config (Cole Robinson) Bug Fixes: - Fix potential crash when setting partial cpu/memory/numa/interface limits on domains (Brian Rak) - event: fix domain reference bugs (Eric Blake) - override: Return NULL on python failure in getCPUModelNames (Cole Robinson) - override: GetCPUModelNames should return None on failure (Cole Robinson) - setPyVirTypedParameter: free whole return variable on error (Michal Privoznik) Improvements: - setup.py: Make have_libvirt_lxc a function (Cole Robinson) - setup.py: Move module list building to its own function (Cole Robinson) - setup.py: Remove unused import (Cole Robinson) - qemu: support arbitrary monitor events (Eric Blake) - generator: Add virConnectDomainQemuMonitorEventCallback to skipped_types (Martin Kletzander) - maint: balance {} usage (Eric Blake) - maint: Add ctags configuration file and ignore the output (Peter Krempa) - maint: set up preferred emacs settings (Eric Blake) - maint: ignore .pyc files (Eric Blake) - Add test for setting scheduler parameters (Daniel P. Berrange) - Add support for running unit tests with nose (Daniel P. Berrange) - setPyVirTypedParameter: Copy full field name (Michal Privoznik) Thaks everybody for your contributions to this release ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Release of libvirt-1.2.3
by Daniel Veillard 01 Apr '14

01 Apr '14

So as scheduled, libvirt-1.2.3 release is ready, it is tagged in git and the tarball and rpms are available at the usual place: ftp://libvirt.org/libvirt/ This release is rather large in the number of commits (more than 400) but includes a lot of changes made to clean up the code base. there is still a fair amount of improvements and a few notable features, and as usual a number of bug fixes :) . To be noted the large improvements on the Xen driver and the bhyve driver for BSD ! Features: - add new virDomainCoreDumpWithFormat API (Qiao Nuohan) - conf: Introduce virDomainDeviceGetInfo API (Jiri Denemark) - more features and fixes on bhyve driver (Roman Bogorodskiy) - lot of cleanups and improvement on the Xen driver (Chunyan Liu, Jim Fehlig) Documentation: - virsh: man: Fix spelling of parameters for --memspec in snapshot-create-as (Shanzhi Yu) - util: fix a typo in virprocess.c and d (Hongwei Bi) - cgroups: fix typo about LXC cgroups (Jean-Baptiste Rouault) - daemon: Enhance documentation for changing NOFILE limit (Jiri Denemark) - domiftune: Reword bandwidth clearing paragraph (Michal Privoznik) - conf: consistent comments about disk enum usage (Eric Blake) - qemu.conf: Mention virtlockd in @lock_manager description (Michal Privoznik) - add VMmanager to web apps (Martin Kletzander) - storage: Explicitly state that it's possible to have non-unique key (Peter Krempa) - typo fix (Roman Bogorodskiy) Portability: - Prohibit Windows special chars in filenames (Matthias Bolte) - tests: Fix SCSI test data filenames for Windows (Matthias Bolte) - apparmor: Fix build after split of disk source metadata (Peter Krempa) - Fix build on mingw32 (Ján Tomko) - build: Fix build with old automake (Jiri Denemark) - Fix build with qemu driver disabled (Roman Bogorodskiy) - Fix type mismatch of virNetDev*NetConfig on non-Linux (Ján Tomko) - virIdentityGetSystem: don't fail if SELinux is disabled (Michael Chapman) Bug Fixes: - build: fix syntax-check for storage_backend (Martin Kletzander) - gluster: Fix "key" attribute for gluster volumes (Peter Krempa) - Fix Memory Leak in testMessageArrayRef() (Nehal J Wani) - virsh: fix 'help event' (Eric Blake) - bhyve: don't leak tap devices on failures (Roman Bogorodskiy) - storage: gluster: Fix crash when initialization of storage backend fails (Peter Krempa) - Fix virNodeDeviceListCaps always returns empty (Jincheng Miao) - Create hostdevmgr in UserRuntimeDirectory for session libvirt (Ján Tomko) - Remove double free in virHostdevManagerDispose (Ján Tomko) - Fix apparmor profile to make vfio pci passthrough work (Cédric Bosdonnat) - Fixed regression in apparmor profiles for qemu brought by 43c030f (Cédric Bosdonnat) - Fix Memory Leak in virQEMUCapsInitGuestFromBinary() (Nehal J Wani) - Fix memory leak in testGetCaps() (Nehal J Wani) - network: fix problems with SRV records (Laine Stump) - Free groups in case of a partial match (Ján Tomko) - qemuDomainAttachDeviceFlags: Parse device xml as inactive (Michal Privoznik) - Coverity: Resolve a RESOURCE_LEAK (John Ferlan) - Coverity: Resolve a FORWARD_NULL (John Ferlan) - Coverity: Resolve a CHECKED_RETURN message (John Ferlan) - bhyve: don't fail on busy tap devices (Roman Bogorodskiy) - libxl: Create log directory earlier (Stefan Bader) - sanlock: Forbid VIR_DOMAIN_LOCK_FAILURE_RESTART (Jiri Denemark) - sanlock: Forbid VIR_DOMAIN_LOCK_FAILURE_IGNORE (Jiri Denemark) - vmware: fix parse of disk source (Eric Blake) - qemuDomainGetImageIds: Skip <seclabel/> without label (Michal Privoznik) - cgroup: Fix start VMs coincidently failed (Wang Yufei) - Remove bogus call to dbus_set_error_from_message (Daniel P. Berrange) - Remove bogus unref in virDBusMessageRead (Daniel P. Berrange) - Check boot order on device attach (Jiri Denemark) - qemu: Return meaningful error when qemu dies early (Jiri Denemark) - Ignore missing files on pool refresh (Ján Tomko) - Ignore char devices in storage pools by default (Ján Tomko) - is_selinux_enabled() returns -1 on error, account for this. (Scott Sullivan) - Fix unitialized data in virSocketAddrMask (Daniel P. Berrange) - Fix virQEMUCapsLoadCache leaks (Ján Tomko) - virNetClientSetTLSSession: Restore original signal mask (Michal Privoznik) - nwfilter: Fix double free of pointer (Stefan Berger) - build: Make sure src/util/virprobe.h is distributed (Jiri Denemark) - qemuhotplugtest: Fix mem-leaking testcases (Nehal J Wani) - build: Fix make distcheck (Martin Kletzander) - virNetServerNewPostExecRestart: Initialize @max_anonymous_clients (Michal Privoznik) - Fix memory leak in virDomainChrSourceDefClear() (Nehal J Wani) - Fix memory leak in virDomainSnapshotDiskDefClear() (Nehal J Wani) - bhyve: allow to destroy only active domains (Roman Bogorodskiy) - Fix leak on OOM when creating nwfilter rule instances (Daniel P. Berrange) - Avoid warning message from libxl driver on non-Xen kernels (Daniel P. Berrange) - Fix mistakes in checking return values (Daniel P. Berrange) - Fix issue found by coverity and cleanup (Pavel Hrdina) - XMLToNative: Parse XML as INACTIVE (Cole Robinson) - qemu: XMLToNative: Don't open vhostfd (Cole Robinson) - qemu: XMLToNative: Don't show -S (Cole Robinson) - qemu: cleanup tap devices on FreeBSD (Roman Bogorodskiy) - openvzRegister: Check for error return (John Ferlan) - nwfilter: Fix rule priority problem (Stefan Berger) - hotplug:Fix log mistake in qemuMonitorAddNetdev (Wang Rui) - libxl: Check for control_d string to decide about dom0 (Stefan Bader) - vircrypto: fix Invalid write in virCryptoHashString() (Nehal J Wani) - Load CPU map from builddir when run uninstalled (Jiri Denemark) - nwfilter: Add missing goto err_exit in error path (Stefan Berger) - Fix sec label setup when attaching to QEMU processes (Daniel P. Berrange) - storage: Fix bugs in VIR_APPEND_ELEMENT series (John Ferlan) - Remove broken error reporting in QEMU mac filtering (Daniel P. Berrange) - BZ1072677: Avoid freeing of 0 file descriptor (Stefan Berger) - Add a mutex to serialize updates to firewall (Daniel P. Berrange) - Fix locking in virsh console (Roman Bogorodskiy) - qemu: Reject unsupported tuning in session mode (Martin Kletzander) - virt-login-shell: silence coverity warning (Eric Blake) - Fix missing char dev lock path case in configure (Roman Bogorodskiy) - storage: Error out when attempting to vol-upload into a remote pool (Peter Krempa) - build: fix cppi warning (Eric Blake) - nwfilter: Increase buffer size for libpcap (Stefan Berger) Improvements: - storage: Rename VolOpenCheckMode to VolOpen (Cole Robinson) - storage: move block format lookup to shared UpdateVolInfo (Cole Robinson) - storage: Rename UpdateVolInfoFlags to UpdateVolInfo (Cole Robinson) - util: storagefile: Don't pursue backing chain of NULL image (Peter Krempa) - storage: pool: Fix XML indentation in pool source lookup (Peter Krempa) - ESX: Add support for virtualHW version 10 (Dawid Zamirski) - Modify help information of virsh list command (Li Yang) - bhyve: add domainLookupByID (Wojciech Macek) - bhyve: add xml2args unittest (Roman Bogorodskiy) - Move virBhyveTapGetRealDeviceName to virnetdevtap (Roman Bogorodskiy) - Shift the for loop over matched vars by one (Ján Tomko) - Use VIR_STRNDUP instead of modifying the matched string (Ján Tomko) - Simplify the loop in virCommandRunRegex (Ján Tomko) - Remove useless 'maxReg' variable (Ján Tomko) - qemu: add unit tests for the capabilities xml (Francesco Romani) - qemu: extract guest capabilities initialization (Francesco Romani) - qemu: export disk snapshot support in capabilities (Francesco Romani) - Show the real cpu shares value in live XML (Ján Tomko) - Treat zero cpu shares as a valid value (Ján Tomko) - qemu: remove redundant virQEMUDriverGetConfig (Tomoki Sekiyama) - Add a rule for indenting labels (Ján Tomko) - Indent top-level labels by one space in tools/ (Ján Tomko) - Indent top-level labels by one space in tests/ (Ján Tomko) - Indent top-level labels by one space in the rest of src/ (Ján Tomko) - Indent top-level labels by one space in src/xen/ (Ján Tomko) - Indent top-level labels by one space in src/vbox/ (Ján Tomko) - Indent top-level labels by one space in src/util/ (Ján Tomko) - Indent top-level labels by one space in src/test/ (Ján Tomko) - Indent top-level labels by one space in src/storage/ (Ján Tomko) - Indent top-level labels by one space in src/rpc/ (Ján Tomko) - Indent top-level labels by one space in src/remote/ (Ján Tomko) - Indent top-level labels by one space in src/qemu/ (Ján Tomko) - Indent top-level labels by one space in src/parallels/ (Ján Tomko) - Indent top-level labels by one space in src/nwfilter/ (Ján Tomko) - Indent top-level labels by one space in src/network/ (Ján Tomko) - Indent top-level labels by one space in src/lxc/ (Ján Tomko) - Indent top-level labels by one space in src/locking/ (Ján Tomko) - Indent top-level labels by one space in libvirt.c (Ján Tomko) - Indent top-level labels by one space in src/libxl/ (Ján Tomko) - Indent top-level labels by one space in src/esx/ (Ján Tomko) - Indent top-level labels by one space in src/cpu/ (Ján Tomko) - Indent top-level labels by one space in src/conf/ (Ján Tomko) - Indent top-level labels by one space in examples/ (Ján Tomko) - Indent top-level labels by one space in daemon/ (Ján Tomko) - util: Sanitize ATTRIBUTE_NONNULL use in viriscsi.h (Peter Krempa) - maint: update to latest gnulib (Eric Blake) - allow "virsh dump --memory-only" specify dump format (Qiao Nuohan) - qemu: add support for virDomainCoreDumpWithFormat API (Qiao Nuohan) - qemu: add qemuMonitorGetDumpGuestMemoryCapability (Qiao Nuohan) - conf: prepare to track multiple host source files per <disk> (Eric Blake) - conf: use disk source accessors in xenxs/ (Eric Blake) - conf: use disk source accessors in xen/ (Eric Blake) - conf: use disk source accessors in vmx/ (Eric Blake) - conf: use disk source accessors in vmware/ (Eric Blake) - conf: use disk source accessors in vbox/ (Eric Blake) - conf: use disk source accessors in uml/ (Eric Blake) - conf: use disk source accessors in security/ (Eric Blake) - conf: use disk source accessors in qemu/ (Eric Blake) - conf: use disk source accessors in phyp/ (Eric Blake) - conf: use disk source accessors in parallels/ (Eric Blake) - conf: use disk source accessors in lxc/ (Eric Blake) - conf: use disk source accessors in locking/ (Eric Blake) - conf: use disk source accessors in libxl/ (Eric Blake) - conf: use disk source accessors in esx/ (Eric Blake) - conf: use disk source accessors in bhyve/ (Eric Blake) - conf: use disk source accessors in conf/ (Eric Blake) - conf: accessors for common source information (Eric Blake) - bhyve: add domainCreateWithFlags support (Roman Bogorodskiy) - bhyve: MAC address configuration (Wojciech Macek) - libxl_driver.c: cleanup code (Chunyan Liu) - Introduce virFDStreamOpenPTY (Roman Bogorodskiy) - Add stubs for virDBusCreateReply{,V} (Ján Tomko) - libvirt support to force convergence of live guest migration (Chegu Vinod) - Allow caller to handle DBus error messages (Daniel P. Berrange) - Introduce alternate way to encode/decode arrays in DBus messages (Daniel P. Berrange) - Add DBus helper methods for creating reply messages (Daniel P. Berrange) - Refactor dbus helper methods for method calls (Daniel P. Berrange) - virlog: Modify virLogParseDefaultPriority's comment of return value (Zhou Yimin) - Fix typo in configure.ac (Ján Tomko) - Define ISCSIADM unconditionally (Ján Tomko) - Pass action to virDomainDefCompatibleDevice (Jiri Denemark) - Fix usage of virDomainDefCompatibleDevice (Jiri Denemark) - tests: Set abs_*dir in a consistent way (Jiri Denemark) - qemu: allow filtering events by regex (Eric Blake) - qemu: enable monitor event filtering by name (Eric Blake) - qemu: enable monitor event reporting (Eric Blake) - qemu: wire up RPC for qemu monitor events (Eric Blake) - qemu: create object for qemu monitor events (Eric Blake) - qemu: virsh wrapper for qemu events (Eric Blake) - qemu: new API for tracking arbitrary monitor events (Eric Blake) - Fix indentation in iscsi storage backend (Ján Tomko) - Add test for virISCSIScanTargets (Ján Tomko) - Add test for virISCSIGetSession (Ján Tomko) - Move functions using iscsiadm to viriscsi.c (Ján Tomko) - Remove storage pool from the arguments of a few functions (Ján Tomko) - Don't create iscsiadm command line in ISCSIPool{Start,Stop} (Ján Tomko) - Switch virCommandRunRegex to use virStringSplit (Ján Tomko) - Move virStorageBackendRun to vircommand (Ján Tomko) - Sort includes in storage_backend_iscsi.c (Ján Tomko) - Require K&R styled curly braces around function bodies (Martin Kletzander) - Use K&R style for curly braces in remaining files (Martin Kletzander) - Use K&R style for curly braces in src/vbox/ (Martin Kletzander) - Use K&R style for curly braces in src/network/bridge_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/lxc/lxc_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/uml/ (Martin Kletzander) - Use K&R style for curly braces in src/test/test_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/nwfilter/ (Martin Kletzander) - Use K&R style for curly braces in src/openvz/ (Martin Kletzander) - Use K&R style for curly braces in src/storage/ (Martin Kletzander) - Use K&R style for curly braces in src/qemu/ (Martin Kletzander) - Use K&R style for curly braces in src/conf/ (Martin Kletzander) - Use K&R style for curly braces in src/rpc/ (Martin Kletzander) - Use K&R style for curly braces in src/util/ (Martin Kletzander) - Use K&R style for curly braces in src/xen*/ (Martin Kletzander) - Use K&R style for curly braces in tests/ (Martin Kletzander) - bhyve: host API support (Wojciech Macek) - libxl: move domain event handler to libxl_domain (Jim Fehlig) - libxl: include a pointer to the driver in libxlDomainObjPrivate (Jim Fehlig) - libxl: move libxlVmStart to libxl_domain (Jim Fehlig) - libxl: move libxlFreeMem to libxl_domain (Jim Fehlig) - libxl: move libxlDomainSetVcpuAffinities to libxl_domain (Jim Fehlig) - libxl: move libxlDoNodeGetInfo to libxl_conf (Jim Fehlig) - libxl: move libxlDomainAutoCoreDump to libxl_domain (Jim Fehlig) - libxl: move libxlDomEventsRegister to libxl_domain (Jim Fehlig) - libxl: move libxlVmCleanup{,Job} to libxl_domain (Jim Fehlig) - libxl: move libxlSaveImageOpen to libxl_domain (Jim Fehlig) - libxl: move libxlDomainManagedSavePath to libxl_domain (Jim Fehlig) - libxl: move libxlDomainEventQueue to libxl_domain (Jim Fehlig) - Add ability to register callback for virCommand dry run (Daniel P. Berrange) - Change CMD_STOPONERR(1) to use true (Daniel P. Berrange) - Change 'int isTempChain' to bool in nwfilter (Daniel P. Berrange) - Remove pointless return values in nwfilter methods (Daniel P. Berrange) - Remove 'int stopOnError' parameters in nwfilter methods (Daniel P. Berrange) - Remove pointless brackets around boolean (Daniel P. Berrange) - Change 'int incoming' to 'bool incoming' in nwfilter code (Daniel P. Berrange) - virhostdev.h: remove ATTRIBUTE_NONNULL from oldStateDir (Chunyan Liu) - libxl: fix framebuffer port setting for HVM domains (Jim Fehlig) - maint: avoid unbalanced {} across vbox #ifdef (Eric Blake) - Remove global log buffer feature entirely (Daniel P. Berrange) - Switch to filtering based on log source name instead of filename (Daniel P. Berrange) - Add virLogSource variables to all source files (Daniel P. Berrange) - Turn virLogSource into a struct instead of an enum (Daniel P. Berrange) - Move dtrace probe macros into separate header file (Daniel P. Berrange) - Refactor code that skips logging of error messages (Daniel P. Berrange) - Reduce performance overhead of the global log buffer (Daniel P. Berrange) - qemuDomainSetInterfaceParameters: Allow bandwidth clear out (Michal Privoznik) - cfg.mk: Fix whitespaces (Martin Kletzander) - Remove double space in file name comment check (Ján Tomko) - Explicitly cast some switch parameters to enum (Martin Kletzander) - Require spaces around equality comparisons (Martin Kletzander) - Remove duplicate network model characters (Martin Kletzander) - tests: cleanup object-locking test (Martin Kletzander) - qemu: agent availability cleanup (Martin Kletzander) - virsh: Prohibit virConnectOpen* functions in virsh (Martin Kletzander) - virsh: Add keepalive in new vshConnect function (Martin Kletzander) - virt-aa-helper: handle 9pfs (Felix Geyer) - Give virNWFilterVarCombIterNext saner semantics (Daniel P. Berrange) - bhyve: fix hostbridge device command generation (Roman Bogorodskiy) - bhyve: add support for virtio block devices (Roman Bogorodskiy) - Enforce attribute check of the virRegister functions (Pavel Hrdina) - daemon: Introduce max_anonymous_clients (Michal Privoznik) - virNetServer: Introduce unauth clients counter (Michal Privoznik) - datatypes: Fix comments (Michael Chapman) - bhyve: implement nodeGetInfo() (Roman Bogorodskiy) - Add parameter to wait for lock in file locking APIs (Nehal J Wani) - spec: move some dirs into appropriate subpackages (Michael Chapman) - build: detect/prohibit hardcoded XML indent in syntax-check (Laine Stump) - conf: eliminate hardcoded indentation in all remaining xml (Laine Stump) - qemu: elminate hardcoded indent in capabilities cache XML (Laine Stump) - util: eliminate hardcoded indent in virConnectSysInfo formatting (Laine Stump) - qemu: eliminate hardcoded indent from migration cookie xml (Laine Stump) - virsh: eliminate hardcoded indentation in xml generated for commands (Laine Stump) - conf: eliminate hardcoded indent in volume/pool xml (Laine Stump) - conf: eliminate hardcoded indentation in node device xml (Laine Stump) - conf: eliminate hardcoded indentation in capabilities xml (Laine Stump) - conf: eliminate hardcoded indentation in nwfilter xml (Laine Stump) - conf: eliminate outmoded/odd indent method from interface xml (Laine Stump) - conf: eliminate hardcoded indent from network xml (Laine Stump) - conf: eliminate hardcoded indent from domain snapshot xml (Laine Stump) - conf: eliminate hardcoded indent from domain xml (Laine Stump) - nwfilter: Add ARP src/dst IP mask for ebtables ARP (Stefan Berger) - hostdev: add virObject field to virHostdevManager struct (Jim Fehlig) - Make ABI stability issue easier to debug (Jiri Denemark) - qemu: Forbid "sgio" support for SCSI generic host device (Osier Yang) - add pci passthrough to libxl driver (Chunyan Liu) - add hostdev pci backend type for xen (Chunyan Liu) - change lxc_hostdev.c to use virhostdev common library APIs (Chunyan Liu) - add unit test for new virhostdev common library (Chunyan Liu) - Add parameter checks/annotations to hostdev APIs (Chunyan Liu) - add 3 wrapper functions for prepare/reattach/update domain hostdevs (Chunyan Liu) - improve virHostdevUpdate* parameters to make it more widely used (Chunyan Liu) - Capitalize USB, PCI and SCSI in hostdev variables (Daniel P. Berrange) - Remove redundant duplicated 'Hostdev' string method names (Daniel P. Berrange) - Capitalize USB, PCI and SCSI in hostdev methods (Chunyan Liu) - Fixed const-ness of parameters in netdev/hostdev code (Daniel P. Berrange) - improve parameter name to let it more meaningful (Chunyan Liu) - move virHostdevNodeDevice* to virhostdev.c (Chunyan Liu) - extract general code of NodeDeviceReset (Chunyan Liu) - extract general code of NodeDeviceReAttach (Chunyan Liu) - extract general code of NodeDeviceDetach (Chunyan Liu) - move virHostdevReAttachHostScsiDevices to virhostdev.c (Chunyan Liu) - pass driver name as parameter to virHostdevReAttachScciHostdevs (Chunyan Liu) - extract general code from qemuDomainReAttachHostScsiDevices (Chunyan Liu) - move virHostdevReAttachUsbHostdevs to virhostdev.c (Chunyan Liu) - pass driver name as paramter to virHostdevReAttachUsbHostdevs (Chunyan Liu) - extract general code from qemuDomainReAttachHostUsbDevices (Chunyan Liu) - move virHostdevPrepareHostSCSIDevices to virhostdev.c (Chunyan Liu) - pass driver name as parameter to virHostdevPrepareSCSIDevices (Chunyan Liu) - extract general code from qemuPrepareHostSCSIDevices (Chunyan Liu) - move virHostdevPrepareHostUSBDevices to virhostdev.c (Chunyan Liu) - pass driver name to virHostdevPrepareUSBDevices (Chunyan Liu) - rename qemu*USBDevices to virHostdev*USBDevices (Chunyan Liu) - extract general code from qemuPrepareHostUSBDevices (Chunyan Liu) - move virHostdevUpdate* functions to virhostdev.c (Chunyan Liu) - pass driver_name as parameter of virHostdevUpdate*Hostdevs functions (Chunyan Liu) - extract general code from qemuUpdateActiveScsiHostdevs (Chunyan Liu) - extract general code from qemuUpdateActiveUsbHostdevs (Chunyan Liu) - extract general code from qemuUpdateActivePciHostdevs (Chunyan Liu) - move virHostdevPrepare(ReAttach)PCIDevices to virhostdev.c (Chunyan Liu) - rename qemuReAttachPciDevice to virHostdevReAttachPciDevice (Daniel P. Berrange) - Conditionally wait for kvm_assigned_device cleanup (Chunyan Liu) - pass driver name as a parameter to virHostdevReAttachPCIDevices (Chunyan Liu) - extract general code from qemuDomainReAttachHostdevDevices (Chunyan Liu) - pass driver name as a parameter to virHostdevPrepareHostdevPCIDevices (Chunyan Liu) - rename qemuGet*PciHostDeviceList to virHostdevGet*PciHostDeviceList (Chunyan Liu) - rename qemu*NetConfigRestore/Replace to virHostdevNetConfigRestore/Replace (Chunyan Liu) - extract general code from qemuPrepareHostdevPCIDevices (Chunyan Liu) - qemu_hostdev: move netconfig file location to virhostdev stateDir (Chunyan Liu) - qemu_hostdev: move ColdBoot as a flag (Chunyan Liu) - qemu_hostdev: move cfg->relaxedACS as a flag (Chunyan Liu) - lxc: use general virhostdev lists instead of its own (Chunyan Liu) - qemu: use general virhostdev lists instead of its own (Chunyan Liu) - qemu: remove functions used internally only from qemu_hostdev.h (Chunyan Liu) - qemu: reuse hostdev interfaces to avoid duplicate (Chunyan Liu) - update qemuPrepareHostUSBDevices parameters to keep consistency (Chunyan Liu) - virhostdev: use virObject to virHostdevManager to keep reference (Chunyan Liu) - Introduce vircommandpriv.h for functions used by tests (Ján Tomko) - Use size_t for ndevice in pool source definition (Ján Tomko) - Introduce virStoragePoolSourceDeviceClear (Ján Tomko) - Change virStorageBackendISCSISession 'probe' arg to bool (Ján Tomko) - qemu: don't munge user input during block commit (Eric Blake) - iptables: don't log command probe failures (Eric Blake) - libxl: support sexpr in native to XML conversion (Jim Fehlig) - Remove unused ebtablesRemoveForwardPolicyReject method (Daniel P. Berrange) - Remove worthless ebtRules data structure (Daniel P. Berrange) - Remove data structure holding list of ebtables rules (Daniel P. Berrange) - Remove unused variables from ebtablesContext (Daniel P. Berrange) - Make ebtablesForwardPolicyReject static (Daniel P. Berrange) - Remove decl of method which doesn't exist in virebtables.h (Daniel P. Berrange) - Remove many decls from bridge driver platform header (Daniel P. Berrange) - Cache result of QEMU capabilities extraction (Daniel P. Berrange) - Change QEMU capabilities cache to check ctime instead of mtime (Daniel P. Berrange) - Add helper APIs to track if libvirtd or loadable modules have changed (Daniel P. Berrange) - virSecurityDACSetSecurityImageLabel: Unmark @def as unused (Michal Privoznik) - tests: Distribute securityselinuxhelperdata (Jiri Denemark) - Convert lock driver plugins to use new crypto APIs (Daniel P. Berrange) - Add helper APIs for generating cryptographic hashes (Daniel P. Berrange) - Change file names in comments to match the files they are in (Ján Tomko) - Wildcard ignore tests/*test instead of listing every one (Daniel P. Berrange) - src/xenxs: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/xen: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/util: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/test: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/storage: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/rpc: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/qemu: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/phyp: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/parallels: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/openvz: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/nwfilter: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/lxc/: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - conf: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - virsh: Sort options alphabetically (Martin Kletzander) - tests: Fix SELinux tests in VPATH build (Jiri Denemark) - virscsi: Introduce virSCSIDeviceUsedByInfoFree (John Ferlan) - tests: Test virIdentityGetSystem (Michael Chapman) - tests: SELinux tests do not need to be skipped (Michael Chapman) - tests: Flesh out securityselinuxhelper (Michael Chapman) - spec: Let translations be properly updated (Jiri Denemark) - datatypes: update comments of Dispose functions (Michael Chapman) - qemu: monitor: Provide more information in generic block job error (Peter Krempa) - storage: Don't lie about path used to look up in error message (Peter Krempa) - storage: Avoid mangling paths of non-local filesystems when looking up (Peter Krempa) - storage: Use cleanup label instead of out (Peter Krempa) - virsh: volume: Fix lookup of volumes to provide better error messages (Peter Krempa) - add virhostdev files to maintain global state of host devices (Chunyan Liu) - add 'driver' info to used_by (Chunyan Liu) - apparmor: handle "none" type (Cédric Bosdonnat) - add support for apparmor in lxc-enter-namespace (Cédric Bosdonnat) - apparmor: add debug traces when changing profile. (Cédric Bosdonnat) - Make sure apparmor is started before libvirtd (Cédric Bosdonnat) - LXC driver: generate apparmor profiles for guests (Cédric Bosdonnat) - qemu: monitor: Fix error message and comment when getting cpu info (Peter Krempa) - qemu: snapshot: Use better check when reverting external snapshots (Peter Krempa) - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (Michal Privoznik) - Check if systemd is running before creating machines (Ján Tomko) - Split out most of virDBusIsServiceEnabled (Ján Tomko) - Don't always skip virportallocatortest (Ján Tomko) - tests: Create privileged driver config in qemuxml2argvtest (Martin Kletzander) - build: Include sys/wait.h in commandtest.c (Ján Tomko) - nwfilter: Display the pcap errror message (Stefan Berger) - nwfilter: Cap the poll timeout in the DHCP Snooping code (Stefan Berger) - virsh: report exit status of failed lxc-enter-namespace (Eric Blake) - virt-login-shell: saner exit value (Eric Blake) - virt-login-shell: use single instead of double fork (Eric Blake) - virFork: simplify semantics (Eric Blake) - util: make it easier to grab only regular command exit (Eric Blake) - util: make it easier to grab only regular process exit (Eric Blake) - util: preserve exit status from mount namespace callback (Eric Blake) - util: make it easier to reflect child exit status (Eric Blake) - virFork: give specific status on failure prior to exec (Eric Blake) - nwfilter: make ignoring non-zero status easier to follow (Eric Blake) - qemu: Implement a stub cpuArchDriver.baseline() handler for arm (Oleg Strikov) - Fix indentation in virsystemdmock (Ján Tomko) - Replace space with a tab in the Makefile (Ján Tomko) - Add a test for virUSBDeviceList functions (Ján Tomko) - Add tests for virUSBDeviceFind functions (Ján Tomko) - Generate a unique journald log for QEMU capabilities failure (Daniel P. Berrange) - Bump version to 1.2.3 for new dev cycle (Michal Privoznik) Cleanups: - util: remove useless comment for virCgroupMoveTask in vircgroup.c (Hongwei Bi) - Don't leave empty first line in C source files (Martin Kletzander) Thanks everybody for contributing to this release, be it with bug reports, patches, ideas, code reviews and help on localization ! Enjoy ! Daniel P.S.: for those looking for the April Fool part, don't worry that corner of the internet is still sane even today :) -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.3
by Daniel Veillard 30 Mar '14

30 Mar '14

I'm one day late but i have tagged the tree and pushed a release candidate 1 tarball and associated rpms to the usual place: ftp://libvirt.org/libvirt/ Being optimistic maybe we can push it on April 1st but maybe it will be safer to wait for Wed for more feedback. I gave it a bit of testing, it looks fine with my limited check, but please give it a try :-) ! thanks, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-1.2.2
by Daniel Veillard 06 Mar '14

06 Mar '14

As planned I have tagged libvirt-1.2.2 in git and it seem the git tree finally updated despite the horrible network I get in china ATM, the tarballs may finally arrive at some time too at the usual place after working around the local infrastructure flaws... : ftp://libvirt.org/libvirt/ I am also pushing a libvirt-python-1.2.2 update at: ftp://libvirt.org/libvirt/libvirt/ since fedpkg upload libvirt-1.2.2.tar.gz failed to progress further than 7% using eithe Cable or ADSL, i assume someone lese will push those to Fedora build system. This is a rather large release with a few new features including beginning of support for the BSD hypervisor, and a lot of significant improvements in various place like linux containers, network storage, Xen drivers, internals etc ... Also of note the fixes for the LXC security bug CVE-2013-6456: Features: - bhyve: add a basic driver (Roman Bogorodskiy) - add LXC from native conversion tool (Cédric Bosdonnat) - vbox: add support for v4.2.20+ and v4.3.4+ (Jean-Baptiste Rouault) - Introduce Libvirt Wireshark dissector (Yuto KAWAMURA) Security: - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (Eric Blake) Documentation: - bhyve: add basic documentation (Roman Bogorodskiy) - Add docs about use of systemd journal for logging (Daniel P. Berrange) - Auto-generate the table of contents in logging doc (Daniel P. Berrange) - Fix heading level in logging docs (Daniel P. Berrange) - Document the keyboard as a valid input type (Ján Tomko) - bandwidth: Adjust documentation (John Ferlan) - remove <auth> from secret XML format (Ján Tomko) - LXC: added some doc on domxml-from-native with mention of limitations (Cédric Bosdonnat) - libxl: fix libxlDoDomainSave documentation (Jim Fehlig) - grammar fixes in formatdomain (Chen Hanxiao) - maint: fix grammar in conf file (Eric Blake) - Fix minor typo in governance doc (Justin Clift) - Write up the project governance process (Daniel P. Berrange) - man: shm-merge-across-nodes is optional (Ján Tomko) - docs/page.xls: remove unnecessary namespace attribute (Pavel Hrdina) - add a permalink to html headers (Dan Kenigsberg) - storage: Add document for possible problem on volume detection (Osier Yang) - Add "note" for node-memory-tune (Osier Yang) - Improve the document for nodesuspend (Osier Yang) - refer to the correct event ID for DomainEventIOErrorReasonCallback (Claudio Bley) - Add sample output of Wireshark dissector (Yuto KAWAMURA) - Add missing space in <clock> documentation (Christophe Fergeau) Portability: - build: skip virportallocatortest on cygwin (Eric Blake) - build: ignore cygwin toolchain droppings (Eric Blake) - build: avoid ld_preload tests on mingw (Eric Blake) - build: fix cgroups on non-Linux (Eric Blake) - build: fix build on 32-bit hosts (Eric Blake) - maint: update to latest gnulib, for older autoconf (Eric Blake) - Fix build of portallocator on mingw (Ján Tomko) - lxc: Don't shadow global symbol "link" (Peter Krempa) - storage: Fix build with older compilers afeter gluster snapshot series (Peter Krempa) - spec: add missing dep of libvirt-daemon-config-network (Thierry Parmentelat) - spec: require libvirt-daemon-driver-interface only when built (Thierry Parmentelat) - Fixed build with clang. (Cédric Bosdonnat) - Rename 'index' in virCapabilitiesGetCpusForNode (Ján Tomko) - qemuxml2argvmock: Mock time() on non-linux platforms too (Michal Privoznik) - build: Fix 'make rpm' in VPATH with wireshark (Martin Kletzander) - Remove windows thread implementation in favour of pthreads (Daniel P. Berrange) - Fix pthread_sigmask check for mingw32 without winpthreads (Daniel P. Berrange) - Skip check-augeas-lockd when QEMU is disabled (Daniel P. Berrange) - maint: add configure checks for BSD CPU affinity (Roman Bogorodskiy) - BSD: implement virProcess{Get,Set}Affinity (Roman Bogorodskiy) - tests: Fix PCI test data filenames for Windows (Matthias Bolte) - wireshark: Fix VPATH build (Jiri Denemark) - Honour prefix in wireshark install dir (Daniel P. Berrange) - Use AC_PATH_PROG to search for dmidecode (Roman Bogorodskiy) Bug fixes: - bhyve: defined domains should be persistent (Roman Bogorodskiy) - Fix journald PRIORITY values (Daniel P. Berrange) - spec: Fix braces around macros (Peter Krempa) - spec: Use correct versions of libgfapi in RHEL builds (Peter Krempa) - network: unplug bandwidth and call networkRunHook only when appropriate (Laine Stump) - network: don't even call networkRunHook if there is no network (Laine Stump) - Fix memory leak in virSCSIDeviceListDel() (Nehal J Wani) - libxl: queue domain event earlier in shutdown handler (Jim Fehlig) - virsh: mark CPU usage field names as translatable (Ján Tomko) - virsh: initialize str to NULL to solve a build issue (Chen Hanxiao) - virsh: Don't leak buffer if GetFDs fails in cmdCreate (Ján Tomko) - libvirt-guests: Wait for libvirtd to initialize (Michal Privoznik) - virSystemdCreateMachine: Set dependencies for slices (Michal Privoznik) - Ignore additional fields in iscsiadm output (Ján Tomko) - libxl: always use libxlVmCleanupJob in shutdown thread (Jim Fehlig) - qemu: adjust maxmem/maxvcpu computation (Eric Blake) - Fix multiple bugs in LXC domainMemoryStats driver (Daniel P. Berrange) - Fix misspelled cpuacct.usage_percpu in cgroup mock. (Thorsten Behrens) - virsh: fix memleak when starting a guest with invalid fd (Jincheng Miao) - networkRunHook: Run hook only if possible (Michal Privoznik) - bridge_driver.h: Fix build --without-network (Michal Privoznik) - Fix conflicting types of virInitctlSetRunLevel (Ján Tomko) - Fix reset of cgroup when detaching USB device from LXC guests (Daniel P. Berrange) - Fix path used for USB device attach with LXC (Daniel P. Berrange) - Don't block use of USB with containers (Daniel P. Berrange) - storage: gluster: Don't leak private data when storage file init fails (Peter Krempa) - storage: handle NULL return from virGetStorageVol (Michael Chapman) - Fix leaks in vircapstest (Ján Tomko) - AppArmor: Fix the place where the template should be installed (Cédric Bosdonnat) - Libvirt lose sheepdogs volumes on pool refresh or restart. When restarting sheepdog pool, all volumes are missing. This patch add automatically all volume from the added pool. (Joel SIMOES) - maint: fix line numbers in check-aclrules reports (Yuri Myasoedov) - qemu: Use correct permissions when determining the image chain (Peter Krempa) - virpci: Resolve coverity issues (John Ferlan) - qemu: keep pre-migration domain state after failed migration (Martin Kletzander) - qemu: Fix crash in virDomainMemoryStats with old qemu (Jiri Denemark) - network: disallow <bandwidth>/<mac> for bridged/macvtap/hostdev networks (Laine Stump) - Honor blacklist for modprobe command (John Ferlan) - qemu: be sure we're using the updated value of backend during hotplug (Laine Stump) - Resolve Coverity dead_error_begin (John Ferlan) - qemu: Fix the error message for scsi host device's shareable checking (Osier Yang) - xen: fix parsing xend http response (Jim Fehlig) - storage: Fix the memory leak (Osier Yang) - Fix buffer size in linuxNodeGetCPUstats (Bing Bu Cao) - util: Correct the NUMA node range checking (Osier Yang) - qemu: Avoid crash in qemuDiskGetActualType (Peter Krempa) - linuxNodeGetCPUStats: Correctly handle cpu prefix (Bing Bu Cao) - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (Peter Krempa) - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (Peter Krempa) - lxc: Fix coverity (Martin Kletzander) - qemu: Don't detach devices if passthrough doesn't work (Jincheng Miao) - pci: Fix failure paths in detach (Jiri Denemark) - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (Michal Privoznik) - Fix possible memory leak in virsh-domain-monitor.c in cmdDomblklist (Pavel Hrdina) Improvements: - virsh: add --all flag to 'event' command (Eric Blake) - virsh: support remaining domain events (Eric Blake) - bhyve: support domain undefine (Roman Bogorodskiy) - Add comments describing the different log sources (Daniel P. Berrange) - Include error domain and code in log messages from errors (Daniel P. Berrange) - Send virLogMetadata fields onto the journal (Daniel P. Berrange) - qemu: Enable 'host-passthrough' cpu mode for arm (Oleg Strikov) - domblkstat: Produce error message that at least sounds like English (Michal Privoznik) - virDomainBlockStats(Flags): Produce saner error message on empty disk path (Michal Privoznik) - tests: avoid littering /tmp (Eric Blake) - sanlock: Truncate domain names longer than SANLK_NAME_LEN (Jiri Denemark) - maint: Fix minor typo (unkown) (Yuri Chornoivan) - libxl: Recognise ARM architectures (Ian Campbell) - virsh: Honour -q in domblklist, vcpupin and emulatorpin (Michal Privoznik) - spec: make systemd_daemon usage configurable (Eric Blake) - spec: require device-mapper-devel for storage-disk (Eric Blake) - spec: explicitly avoid bhyve on Linux (Eric Blake) - build: use --with-systemd-daemon as configure option (Eric Blake) - virNetDevVethCreate: Serialize callers (Michal Privoznik) - network: include plugged interface XML in "plugged" network hook (Laine Stump) - conf: output actual netdev status in <interface> XML (Laine Stump) - conf: new function virDomainActualNetDefContentsFormat (Laine Stump) - conf: re-situate <bandwidth> element in <interface> (Laine Stump) - conf: make virDomainNetDefFormat a public function (Laine Stump) - conf: handle null pointer in virNetDevVlanFormat (Laine Stump) - conf: clarify what is returned for actual bandwidth and vlan (Laine Stump) - rbd: Set timeout options for librados (Wido den Hollander) - rbd: Include return statuses from librados/librbd in logging (Wido den Hollander) - virsh: kill over-engineered asprintf failure recovery (Eric Blake) - virsh: use more compact VIR_ENUM_IMPL (Eric Blake) - libxl: handle on_crash coredump actions (Jim Fehlig) - libxl: add dump dir to libxlDriverConfig object (Jim Fehlig) - libxl: honor domain lifecycle event configuration (Jim Fehlig) - Ensure systemd cgroup ownership is delegated to container with userns (Richard Weinberger) - bhyve: implement node information reporting (Roman Bogorodskiy) - Add virStringReplace method for substring replacement (Daniel P. Berrange) - Add virStringSearch method for regex matching (Manuel VIVES) - virNetServerRun: Notify systemd that we're accepting clients (Michal Privoznik) - Add a stub for virCgroupGetDomainTotalCpuStats (Ján Tomko) - maint: update to latest gnulib (Eric Blake) - virsh: add net-event command (Eric Blake) - virsh: add event command, for lifecycle events (Eric Blake) - virsh: common code for waiting for an event (Eric Blake) - virsh: common code for parsing --seconds (Eric Blake) - libxl: queue shutdown event on domain shutdown (Jim Fehlig) - Rename virDomainGetRootFilesystem to virDomainGetFilesystemForTarget (Daniel P. Berrange) - Introduce new OOM testing support (Daniel P. Berrange) - Add unit test for virCgroupGetPercpuStats. (Thorsten Behrens) - Add unit test for virCgroupGetMemoryUsage. (Thorsten Behrens) - Add unit test for virCgroupGetBlkioIo*Serviced (Thorsten Behrens) - Widening API change - accept empty path for virDomainBlockStats (Thorsten Behrens) - Implement lxcDomainBlockStats* for lxc driver (Thorsten Behrens) - Implement domainGetCPUStats for lxc driver. (Thorsten Behrens) - Make qemuGetDomainTotalCPUStats a virCgroup function. (Thorsten Behrens) - Implement domainMemoryStats API slot for LXC driver. (Thorsten Behrens) - Add util virCgroupGetBlkioIo*Serviced methods. (Thorsten Behrens) - lxc: Add destroy support for suspended domains (Richard Weinberger) - libxl: use job functions in libxlDomainSetSchedulerParametersFlags (Jim Fehlig) - libxl: use job functions in libxlDomainSetAutostart (Jim Fehlig) - libxl: use job functions in device attach and detach functions (Jim Fehlig) - libxl: use job functions in vcpu set and pin functions (Jim Fehlig) - libxl: use job functions in libxlDomainCoreDump (Jim Fehlig) - libxl: use job functions in domain save operations (Jim Fehlig) - libxl: use job functions when cleaning up a domain (Jim Fehlig) - libxl: use job functions in libxlDomain{Suspend,Resume} (Jim Fehlig) - libxl: use job functions in libxlDomainSetMemoryFlags (Jim Fehlig) - libxl: use job functions in libxlVmStart (Jim Fehlig) - libxl: Add job support to libxl driver (Jim Fehlig) - libxl: remove libxlVmReap function (Jim Fehlig) - libxl: always set vm id to -1 on shutdown (Jim Fehlig) - qemu: Use virtio network device for aarch64/virt (Oleg Strikov) - Add a default USB keyboard and USB mouse for PPC64 (Li Zhang) - xen: format xen config for USB keyboard (Li Zhang) - qemu: format qemu command line for USB keyboard (Li Zhang) - qemu: Add USB keyboard capability (Li Zhang) - conf: Remove the implicit PS2 devices for non-X86 platforms (Li Zhang) - conf: Add keyboard input device type (Li Zhang) - conf: Add one interface to add default input devices (Li Zhang) - network: Taint networks that are using hook script (Michal Privoznik) - network: Introduce network hooks (Michal Privoznik) - network_conf: Expose virNetworkDefFormatInternal (Michal Privoznik) - Add helper for running code in separate namespaces (Daniel P. Berrange) - Add virFileMakeParentPath helper function (Daniel P. Berrange) - Move check for cgroup devices ACL upfront in LXC hotplug (Daniel P. Berrange) - Disks are always block devices, never character devices (Daniel P. Berrange) - Record hotplugged USB device in LXC live guest config (Daniel P. Berrange) - qemu: Implement VIR_DOMAIN_TAINT_HOOK (Michal Privoznik) - virDomainTaintFlags: Introduce VIR_DOMAIN_TAINT_HOOK (Michal Privoznik) - Add tests for secret XML parsing (Ján Tomko) - Forgot to add lxcconf2xmldata to dist. (Cédric Bosdonnat) - Support IPv6 in port allocator (Ján Tomko) - Split out bind() from virPortAllocatorAcquire (Ján Tomko) - qemu: snapshot: Add support for external active snapshots on gluster (Peter Krempa) - qemu: snapshot: Use new APIs to detect presence of existing storage files (Peter Krempa) - qemu: Switch snapshot deletion to the new API functions (Peter Krempa) - storage: Add storage file backends for gluster (Peter Krempa) - storage: add file functions for local and block files (Peter Krempa) - storage: Add file storage APIs in the default storage driver (Peter Krempa) - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (Peter Krempa) - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (Peter Krempa) - spec: add missing dep of libvirt-daemon-config-nwfilter (Eric Blake) - lxc from native: removed now remaining useless line (Cédric Bosdonnat) - Fix stream related spelling mistakes (Philipp Hahn) - LXC from native: convert blkio throttle config (Cédric Bosdonnat) - LXC from native: map vlan network type (Cédric Bosdonnat) - LXC from native: map block filesystems (Cédric Bosdonnat) - LXC from native: map lxc.arch to /domain/os/type@arch (Cédric Bosdonnat) - LXC from native: add lxc.cgroup.blkio.* mapping (Cédric Bosdonnat) - LXC from native: map lxc.cgroup.cpuset.* (Cédric Bosdonnat) - LXC from native: map lxc.cgroup.cpu.* (Cédric Bosdonnat) - LXC from native: migrate memory tuning (Cédric Bosdonnat) - LXC from native: convert lxc.id_map into <idmap> (Cédric Bosdonnat) - LXC from native: convert macvlan network configuration (Cédric Bosdonnat) - LXC from native: convert lxc.tty to console devices (Cédric Bosdonnat) - LXC from native: convert phys network types to net hostdev devices (Cédric Bosdonnat) - LXC from native: migrate veth network configuration (Cédric Bosdonnat) - LXC from native: implement no network conversion (Cédric Bosdonnat) - LXC from native: migrate fstab and lxc.mount.entry (Cédric Bosdonnat) - LXC from native: import rootfs (Cédric Bosdonnat) - LXC driver: started implementing connectDomainXMLFromNative (Cédric Bosdonnat) - Improve virConf parse to handle LXC config format (Cédric Bosdonnat) - event: pass reason for PM events (Eric Blake) - event: convert remaining domain events to new style (Eric Blake) - event: client RPC protocol tweaks for domain lifecycle events (Eric Blake) - event: prepare client to track domain callbackID (Eric Blake) - event: server RPC protocol tweaks for domain lifecycle events (Eric Blake) - event: dynamically manage server-side RPC domain events (Eric Blake) - qemu: Implement a stub cpuArchDriver.baseline() handler for aarch64 (Oleg Strikov) - libxl: register for domain events immediately after creation (Jim Fehlig) - libxl: rename libxlCreateDomEvents to libxlDomEventsRegister (Jim Fehlig) - vircapstest: Introduce virCapabilitiesGetCpusForNodemask test (Pradipta Kr. Banerjee) - Handle non-sequential NUMA node numbers (Pradipta Kr. Banerjee) - storage: gluster: Set volume metadata in a separate function (Peter Krempa) - qemu: introduce spiceport chardev backend (Martin Kletzander) - qemu: remove pointless condition (Martin Kletzander) - qemu: rework '-serial none' (Martin Kletzander) - conf: introduce spiceport chardev backend (Martin Kletzander) - rbd: Use rbd_create3 to create RBD format 2 images by default (Wido den Hollander) - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (Laine Stump) - virNetworkLoadState: Disallow mangled 'floor' element (Michal Privoznik) - networkStartNetwork: Be more verbose (Michal Privoznik) - qemu: hyperv: Add support for timer enlightenments (Peter Krempa) - conf: Enforce supported options for certain timers (Peter Krempa) - schema: Fix guest timer specification schema according to the docs (Peter Krempa) - apparmor: Improve profiles (Felix Geyer) - Add glusterfs to VIR_CONNECT_LIST_STORAGE_POOLS_FILTERS_POOL_TYPE (Christophe Fergeau) - libxl: remove unneeded locking of driver when restoring (Jim Fehlig) - libxl: improve subprocess handling (Jim Fehlig) - libxl: handle domain shutdown events in a thread (Jim Fehlig) - libxl: remove list of timer registrations from libxlDomainObjPrivate (Jim Fehlig) - libxl: fix leaking libxlDomainObjPrivate (Jim Fehlig) - qemu_driver: Introduce <filesystem/> support in device attach/detach (Matthieu Coudron) - virDomainHostdev{Insert,Delete}: Replace VIR_REALLOC_N by VIR_{APPEND,DELETE}_ELEMENT (Matthieu Coudron) - qemuxml2argvtest: Set timezone (Michal Privoznik) - virsh: only report filled values in nodecpustats (Ján Tomko) - BSD: implement nodeGetCPUStats (Roman Bogorodskiy) - qemu: blockjob: Print correct file name in error message (Peter Krempa) - maint: Change the text of the NULLSTR() macro to "<null>" (Peter Krempa) - qemuxml2argvtest: Test localtime clock basis (Michal Privoznik) - qemuBuildClockArgStr: Allow localtime clock basis (Michal Privoznik) - Generate a valid imagelabel even for type 'none' (Ján Tomko) - event: move event filtering to daemon (regression fix) (Eric Blake) - rpm: create libvirt-wireshark sub-package (Eric Blake) - tests: Add test for new virkmod functions (John Ferlan) - utils: Introduce functions for kernel module manipulation (John Ferlan) - network: change default of forwardPlainNames to 'yes' (Laine Stump) - network: only prevent forwarding of DNS requests for unqualified names (Laine Stump) - virnetdevbandwidthtest: Link with libxml2 (Michal Privoznik) - spice: don't force user to specify spicevmc channel (Martin Kletzander) - virnetdevbandwidthtest: Introduce some more tests (Michal Privoznik) - virnetdevbandwidthtest: fix hard coded /sbin/tc (Cédric Bosdonnat) - Push nwfilter update locking up to top level (Daniel P. Berrange) - Add a read/write lock implementation (Daniel P. Berrange) - tests: Modify the scsi util tests (Osier Yang) - util: Accept test data path for scsi device's sg_path (Osier Yang) - tests: Add tests for scsi utils (Osier Yang) - util: Add one argument for several scsi utils (Osier Yang) - qemu: Don't fail if the SCSI host device is shareable between domains (Osier Yang) - virnetdevbandwidthtest: Introduce testVirNetDevBandwidthSet (Michal Privoznik) - virCommand: Introduce virCommandSetDryRun (Michal Privoznik) - snapshot: Add support for specifying snapshot disk backing type (Peter Krempa) - tests: Add more tests for virConnectBaselineCPU (Jiri Denemark) - cpu: Try to use source CPU model in virConnectBaselineCPU (Jiri Denemark) - cpu: Fix VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark) - tests: Better support for VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark) - Reword error message for oversized cpu time fields (Ján Tomko) - Simplify linuxNodeGetCPUStats (Ján Tomko) - Add hw random number generator (/dev/hwrng) to cgroup ACL (Pradipta Kr. Banerjee) - tests: Introduce virnetdevbandwidthtest (Michal Privoznik) - Add test for linuxNodeGetCPUStats (Ján Tomko) - Move test-local declarations to nodeinfopriv.h (Ján Tomko) - qemu: Enable 'host-passthrough' cpu mode for aarch64 (Oleg Strikov) - Block info query: Add check for transient domain (John Ferlan) - maint: update to latest gnulib, for mingw improvements (Eric Blake) - util: Add "shareable" field for virSCSIDevice struct (Osier Yang) - storage: Fix autostart of pool with "fc_host" type adapter (Osier Yang) - api: require write permission for guest agent interaction (Eric Blake) - virtlockd: make re-exec more robust (Michael Chapman) - build: add $(prefix) to SYSTEMD_UNIT_DIR (Laine Stump) - spice: expose the QEMU disable file transfer option (Francesco Romani) - spice: detect if qemu can disable file transfer (Francesco Romani) - lxc: allow to setup throttle blkio cgroup through virsh (Gao feng) - Add test for transient disk support in VMX files (Wout Mertens) - Make syntax check notice assignments w/o surrounding spaces. (Thorsten Behrens) - maint: align whitespaces with project conventions. (Thorsten Behrens) - virpcitest: Test virPCIDeviceDetach failure (Jiri Denemark) - virpcimock: Add PCI driver which always fails (Jiri Denemark) - virpcitest: More tests for device detach and reattach (Jiri Denemark) - virpcimock: Mock /sys/bus/pci/drivers_probe (Jiri Denemark) - pci: Publish some internal code for virpcitest (Jiri Denemark) - virpcitest: Show PCI device tested by each test (Jiri Denemark) - pci: Make reattach work for unbound devices (Jiri Denemark) - qemu: allow to setup throttle blkio cgroup through virsh (Gao feng) - virsh: add setting throttle blkio cgroup option to blkiotune (Gao feng) - blkio: Setting throttle blkio cgroup for domain (Gao feng) - domain: introduce xml elements for throttle blkio cgroup (Gao feng) - maint: replace remaining virLib*Error with better names (Eric Blake) - maint: simplify driver registration at startup (Eric Blake) - maint: clean up error reporting in migration (Eric Blake) - maint: don't lose error on canceled migration (Eric Blake) - maint: avoid nested use of virConnect{Ref,Close} (Eric Blake) - maint: don't leave garbage on early API exit (Eric Blake) - qemu: Change the default unix monitor timeout (Martin Kletzander) - storage: Sheepdog: Separate creating of the volume from building (Peter Krempa) - storage: RBD: Separate creating of the volume from building (Peter Krempa) - storage: Support deletion of volumes on gluster pools (Peter Krempa) - conf: Always use VIR_ERR_CONFIG_UNSUPPORTED on enumFromString() failures (Christophe Fergeau) Cleanups: - build-sys: Removed unused variable from configure.ac (Christophe Fergeau) - qemu: remove memset params array to zero in qemuDomainGetPercpuStats (Gao feng) - util: Fix the indention (Osier Yang) - virsh: Fix the string breaking style (Osier Yang) thanks everybody for the help with those release, be it with patches, bug reports, reviews, documentation, localizations, etc... Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

2 1

[Libvirt-announce] Entering freeze for libvirt-1.2.2
by Daniel Veillard 26 Feb '14

26 Feb '14

As planned I tagged a release candidate 1 version in git and made tarballs and rpms available at the usual place: ftp://libvirt.org/libvirt/ it seems to work well in my limited testing, but let's spend some time this week making more tests and checking it compiles on other systems and architectures. if all goes well I will probably push the release next week-end, with an rc2 on Wednesday based on feedback, thanks ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] ANNOUNCE: libvirt-glib release 0.1.8
by Daniel P. Berrange 21 Feb '14

21 Feb '14

I am pleased to announce that a new release of the libvirt-glib package, version 0.1.8, is now available from ftp://libvirt.org/libvirt/glib/ The packages are GPG signed with Key fingerprint: DAF3 A6FD B26B 6291 2D0E 8E3F BE86 EBB4 1510 4FDF (4096R) Changes in this release: - Add getter/setter for UUID in domain config - Remove dead code / unused variables - Add missing symbol exports - Add support for setting nwfilters in domain config - Switch to standard gobject introspection autotools macros - Fix typo preventing removal of clock config - Add getter/setters for disk driver type - Add unit tests based on glib tap harness - Add test for validating symbol file exports - Add getters for domain graphics config params - Add more getters for domain timer config - Add support for hpet timer type - Fix event loop impl on win32 - Fix parent class/object of pit timer class - Fix misc API doc bugs - Add more getters for domain clock config - Fix removal of domain CPU feature flags - Fix removal of capabilities CPU topology - Misc fixes to glib event loop integration libvirt-glib comprises three distinct libraries: - libvirt-glib - Integrate with the GLib event loop and error handling - libvirt-gconfig - Representation of libvirt XML documents as GObjects - libvirt-gobject - Mapping of libvirt APIs into the GObject type system NB: While libvirt aims to be API/ABI stable forever, with libvirt-glib we are not yet guaranteeing that libvirt-glib libraries are API/ABI permanently stable. As of the 0.0.8 release, we have tentatively frozen the API/ABI with the intent of being longterm stable hereafter, but there is still a small chance we might find flaws requiring an API/ABI change. The likelihood of this is low, however, and we will strive to avoid it. Follow up comments about libvirt-glib should be directed to the regular libvir-list(a)redhat.com development list. Thanks to all the people involved in contributing to this release. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] LSN-2013-0018: Unsafe usage of paths under /proc/$PID/root by the LXC driver
by Daniel P. Berrange 19 Feb '14

19 Feb '14

Libvirt Security Notice: LSN-2013-0018 ====================================== Summary: Unsafe usage of paths under /proc/$PID/root by the LXC driver Reported on: 20131217 Published on: 20131217 Fixed on: 20140219 Reported by: Reco <recoverym4n(a)gmail.com> Patched by: Reco <recoverym4n(a)gmail.com>, Eric Blake <eblake(a)redhat.com>, Daniel Berrange <berrange(a)redhat.com> See also: CVE-2013-6456, debian bug #732394 Description ----------- The LXC driver will open paths under /proc/$PID/root for some operations it performs on running guests. For the virDomainShutdown and virDomainReboot APIs it will use this to access the /dev/initctl path in the container. For the virDomainDeviceAttach / virDomainDeviceDettach APIs it will use this to create device nodes in the container's /dev filesystem. If any of the path components under control of the container are symlinks the container can cause the libvirtd daemon to access the incorrect files. Impact ------ A container can cause the administrator to shutdown or reboot the host OS if /dev/initctl in the container is made to be an absolute symlink back to itself or /run/initctl. A container can cause the host administrator to mknod in an arbitrary host directory when invoking the virDomainDeviceAttach API by replacing '/dev' with an absolute symlink. A container can cause the host administrator to delete host device when invoking the virDomainDeviceDettach API by replacing '/dev' with an absolute symlink. Workaround ---------- Do not use the virDomainShutdown or virDomainReboot APIs without also passing the VIR_DOMAIN_SHUTDOWN_SIGNAL or VIR_DOMAIN_REBOOT_SIGNAL flags respectively. These will cause the LXC driver to send a SIGTERM or SIGHUP signal respectively, to the init process instead of using /dev/initct.. Do not use the virDomainDeviceAttach or virDomainDeviceDetach APIs at all unless the guest OS is trusted. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v1.0.1 Broken in: v1.0.2 Broken in: v1.0.3 Broken in: v1.0.4 Broken in: v1.0.5 Broken in: v1.0.6 Broken in: v1.0.0 Broken in: v1.1.1 Broken in: v1.1.2 Broken in: v1.1.3 Broken in: v1.1.4 Broken in: v1.2.0 Broken in: v1.2.1 Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: aebbcdd33c8c18891f0bdbbf8924599a28152c9c Fixed by: 4dd3a7d5bc44980135a1b11810ba9aeab42a4a59 Fixed by: 7fba01c15c1f886b4235825692b4c13e88dd9f7b Fixed by: 1754c7f0ab1407dcf7c89636a35711dd9b1febe1 Fixed by: 1cadeafcaa422844a27ef622e2a7041d0235bcb3 Fixed by: 5fc590ad9f4071350a8df4d567ba88baacc8334d Branch: v1.0.1-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Branch: v1.0.2-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Branch: v1.0.3-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Branch: v1.0.4-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Branch: v1.0.5-maint Broken in: v1.0.5.1 Broken in: v1.0.5.2 Broken in: v1.0.5.3 Broken in: v1.0.5.4 Broken in: v1.0.5.5 Broken in: v1.0.5.6 Broken in: v1.0.5.7 Broken in: v1.0.5.8 Broken in: v1.0.5.9 Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: f84056cf6166332b1f15f3e6584a88f5d42273fe Fixed by: 0e9fee68b3bff24e4d3ab48de8129946202f3bc0 Fixed by: 9849cf6d89e5665667a0df449ddc3fd5582da242 Fixed by: 21821ed4d1faf5bf563a26e8ac7cd2eb0450d322 Fixed by: e57058cfe827b1971ca0dee224ff273c9cad7756 Fixed by: e1e7e05376faf1ed471cb5c1d1e0415458f2af7d Branch: v1.0.6-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: e9941eee1a3c1cb0af7bc39076eb0e8c2c4eb603 Fixed by: 84cf9af8d9a803f2e12df0b8b0c2bd2de544cf93 Fixed by: f8706947b86e6de2961aacddb5eb2345d9c033b4 Fixed by: 081e0fabfd8c0f5c3f2c869ddcf11710c445a962 Fixed by: b2a853e1f6aea9683a30eafd2b069b8be0fcf898 Fixed by: bd9ec4506e29a9ce682961eee99d0326ed64145d Branch: v1.1.0-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: 61c7e0b66e8b37d4ea64024c100d2ed467d5cb47 Fixed by: 43720035b7f4c175ef2594296d874bc1910840b3 Fixed by: 212414281f0001da78f2312d7f52dcf124317fc9 Fixed by: c17dd7ede2affd147ffdc5e8daef85939bda0dd0 Fixed by: ed46a680a02cf96b229a89f74ddbab69522c9ef5 Fixed by: 807db4a30ee903f973d496b3293d9e6aaa511174 Branch: v1.1.1-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: 6ecb7bc3aed7f60edad5289c9b0cfcf99eee6611 Fixed by: 72a4c29ca72789b13de1ed9cb96df9fb2b0fdde4 Fixed by: 83f83508e128275bd1b74988162dc6b9f86e00ee Fixed by: 398c88edfaef50b9b59eb2d9a61b07c9c940a661 Fixed by: dd055960df60c536957664f0ae3c591feecf7b09 Fixed by: 14d69bd00e4455a1d174d14c5af73975cf9e904a Branch: v1.1.2-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: f639b2d17ce935b650bb2aca7bdd8d727cab8b02 Fixed by: a06bdfcb446f182e490f70422a8431c3bcb2c801 Fixed by: 77ddbad2a9272239a09673c5d6993793308514e9 Fixed by: a6e9270ec79924fabd5a872984bb5d38eaf3df8a Fixed by: eae2a2ada81c5828991bb1b9438f7556a7e51ce8 Fixed by: 21368274a9aa91e8a5f0addb3a6bba8dad91e334 Branch: v1.1.3-maint Broken in: v1.1.3.1 Broken in: v1.1.3.2 Broken in: v1.1.3.3 Fixed in: v1.1.3.4 Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: a3a3cfcb7c400bcde198b5b929ff2d4f889dee78 Fixed by: cb016b9ef1a6d786657a98546db8412f86510367 Fixed by: 72e379ed93b4707e26bbc5e3457a85833f50eb1a Fixed by: fcf05c194cb1cca6b5c703073b97ed1408a2c546 Fixed by: d5c0b57fffbe651c425b4de6c11712030cce7e7e Fixed by: fef343339127b989746214b86901553da6d17863 Branch: v1.1.4-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: 28681077373f1fa567b7f56117a22047f90925fe Fixed by: 0e931dfcda308fbb84eef42bc92e257e39af083d Fixed by: 3101022b4d4fee46916b87b1c21a3956a91d94b2 Fixed by: 1d1daaf58677cfa843b6891a98dc6cdb42116434 Fixed by: 80f57ec4224af65392db09fb8f47be7434e2fc86 Fixed by: ba4065b6f64fca7706070b8458fdf0bc06115b9b Branch: v1.2.0-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: 3e97a53caa9adddd47da1c22dbed81ef2e02f735 Fixed by: 17188260657e095f5d210bc73ba1661875a8f885 Fixed by: 70665ec5f2cd910666bc703727dc6d7c15efe7bf Fixed by: 3f43a7727ac068de8aac6b9c030b38fb3cb1426d Fixed by: cd48d62aca488a116b47073be2607653a1d3305e Fixed by: 8fca7a4fa6b40d21723008d2092536349f20517d Branch: v1.2.1-maint Broken by: cbb106f807b32f1f6af22d1e92fe0ff9ba6d73b3 Broken by: de858e3fa7ffcab5f80d07f8a74d94cbaf8716b9 Broken by: ed77abc58bc5a6837a5021f26e1a335dbfb477bf Broken by: a5efb3190913b6903775ca3756f79443d4ea8a5b Broken by: 4ad6a013304f6fe29b0866742c902054bfbcf23f Fixed by: 8b546028f901dc414463678574ceabbacc37c4cb Fixed by: b0ed2d94ace3c57198ce7b4793f906abf5397e36 Fixed by: ee1269eecd3566729f3909db624f7ebd7bf1b84a Fixed by: b9997828231b3492252cb6d9a0ad4f3dc522791e Fixed by: 51a897a22e1c031edd46fd077487a2f8e649cb9f Fixed by: ad52184399aa414fa3d7e2756e4ea6a45ec0d3a3 -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.4 maintenance release
by Cole Robinson 19 Feb '14

19 Feb '14

libvirt 1.1.3.4 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.4.tar.gz Changes in this version: * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug * CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code * Add helper for running code in separate namespaces * Add virFileMakeParentPath helper function * Move check for cgroup devices ACL upfront in LXC hotplug * Disks are always block devices, never character devices * Fix reset of cgroup when detaching USB device from LXC guests * Record hotplugged USB device in LXC live guest config * Fix path used for USB device attach with LXC * Don't block use of USB with containers * storage: avoid short reads while chasing backing chain * event: move event filtering to daemon (regression fix) * Push nwfilter update locking up to top level * Add a read/write lock implementation * tests: Add more tests for virConnectBaselineCPU * cpu: Try to use source CPU model in virConnectBaselineCPU * cpu: Fix VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES * tests: Better support for VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES * qemu: Change the default unix monitor timeout For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] LSN-2014-0002: Missing access control check on events
by Daniel P. Berrange 17 Jan '14

17 Jan '14

Libvirt Security Notice: LSN-2014-0002 ====================================== Summary: Missing access control check on events Reported on: 20140103 Published on: 20140115 Fixed on: 20140115 Reported by: Eric Blake <eblake(a)redhat.com> Patched by: Eric Blake <eblake(a)redhat.com> See also: CVE-2014-0028 Description ----------- The asynchronous events were not filtered based on any permission check prior to being dispatched to the client. This could lead to the client learning about the existance of domains that they are not authorized to see Impact ------ A client can use events to learn of domains that they are not authorized to see. Workaround ---------- Prevent untrusted clients from connecting to libvirtd Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v1.1.0 Broken in: v1.1.1 Broken in: v1.1.2 Broken in: v1.1.3 Broken in: v1.1.4 Broken in: v1.2.0 Fixed in: v1.2.1 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: f9f56340539d609cdc2e9d4ab812b9f146c3f100 Branch: v1.1.0-maint Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: cdf29d950c247d06aaa69778238d7cc164c05291 Branch: v1.1.1-maint Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 1d0e4fbf9572ad34045a4f9d87601297a5244c38 Branch: v1.1.2-maint Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: fb5a3190c6409897744a244c6e0d5e2d52d34b39 Branch: v1.1.3-maint Broken in: v1.1.3.1 Broken in: v1.1.3.2 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 51afa9a255d7a073373ad4533eff58bd819890e8 Branch: v1.1.4-maint Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 7ccc13599652722d6aa000b61270c0786d610b9e Branch: v1.2.0-maint Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: eb7ec2312ba968c745031c7432b4fd007cd52d3a -- |: Http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0