- Announce - libvirt List Archives

[Libvirt-announce] Release of libvirt-php-0.5.1
by Michal Privoznik 02 Oct '15

02 Oct '15

So, after little more than a year of development, I'm proud to announce that libvirt-php-0.5.1 is out! It can be downloaded from http://libvirt.org/sources/php/libvirt-php-0.5.1.tar.gz This is relatively small release, mostly focused on cleanups. Thanks to all who participated! Michal

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.2.18.1 maintenance release
by Cole Robinson 22 Sep '15

22 Sep '15

libvirt 1.2.18.1 is now available. This is a maintenance release of libvirt 1.2.18 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.2.18.1.tar.gz Changes in this version: * test driver: don't unlock pool after freeing it * libxl: fix AttachDeviceConfig on hostdev type * security_selinux: Take @privileged into account * selinux: fix compile errors * security_selinux: Add SetDirLabel support * security: Add virSecurityDomainSetDirLabel * security_selinux: Use proper structure to access socket data * security_selinux: Replace SELinuxSCSICallbackData with proper struct * virSecuritySELinuxSetSecurityAllLabel: drop useless virFileIsSharedFSType * virSecurityManager: Track if running as privileged * qemu: hotplug: Properly clean up drive backend if frontend hotplug fails * xen: fix race in refresh of config cache * libxl: don't end job for ephemeal domain on start failure * conf: fix crash when parsing a unordered NUMA <cell/> * qemu: Check virGetLastError return value for migration finish failure * libxl: don't overwrite error from virNetSocketNewConnectTCP() * domain-conf: escape string for socket attribute * src: Check for symbols ordering in ADMIN_SYM_FILES * src: Cleanup libvirt_admin.syms * src: Check libvirt_admin.syms for exported symbols * util: fallback to ioctl(SIOCBRDELBR) if netlink RTM_DELLINK fails * util: fallback to ioctl(SIOCBRADDBR) if netlink RTM_NEWLINK fails * libxl: acquire a job when receiving a migrating domain * libxl: don't attempt to resume domain when suspend fails * libxl: fix ref counting of libxlMigrationDstArgs * libvirt_lxc: Claim success for --help * virt-aa-helper: Improve valid_path * qemu: Emit correct audit message for memory hot unplug * qemu: Emit correct audit message for memory hot plug * hostdev: skip ACS check when using VFIO for device assignment * Start daemon only after filesystems are mounted * virt-aa-helper: add NVRAM store file for read/write * qemu: Update blkio.weight value after successful set * Eliminate incorrect and unnecessary check for changed IP address * virt-aa-helper: allow access to /usr/share/ovmf/ * virt-aa-helper: Simplify restriction logic * virt-aa-helper: document --probing and --dry-run * Add generated libvirt_admin.syms into .gitignore * libvirt-admin: Generate symbols file * daemon: Use $(NULL) for libvird_admin's flags * qemu: Add check for invalid iothread_id in qemuDomainChgIOThread * virsh: Reset global error after successfull domain lookup * build: fix mingw build * Detect location of qemu-bridge-helper * Check if qemu-bridge-helper exists and is executable * qemu: Use numad information when getting pin information * qemu: Keep numad hint after daemon restart * conf: Pass private data to Parse function of XML options * qemu: Fix segfault when parsing private domain data * domain: Fix crash if trying to live update disk <serial> * virNetSocketCheckProtocols: handle EAI_NONAME as IPv6 unavailable * util: don't overwrite stack when getting ethtool gfeatures * conf: Don't try formating non-existing addresses * admin: Drop 'internal.h' include from libvirt-admin.h * qemu: fail on attempts to use <filterref> for non-tap network connections * network: validate network NAT range * virNetDevBandwidthParseRate: Reject negative values * network: verify proper address family in updates to <host> and <range> * conf: more useful error message when pci function is out of range * virDomainDefParseXML: Check for malicious cpu ids in <numa/> * numa_conf: Introduce virDomainNumaGetMaxCPUID * Allow vfio hotplug of a device to the domain which owns the iommu * qemu: Forbid image pre-creation for non-shared storage migration * virsh: fix domfsinfo output in quiet mode * tests: extend workaround for gnutls private key loading failure * qemu: fix some api cannot work when disable cpuset in conf * storage: only run safezero if allocation is > 0 * qemu: command: Report stderr from qemu-bridge-helper * qemu: Fix reporting of physical capacity for block devices * remoteClientCloseFunc: Don't mangle connection object refcount * storage: Correct the 'mode' check * storage: Handle failure from refreshVol * virfile: Introduce virFileUnlink * Revert "LXC: show used memory as 0 when domain is not active" For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] LSN-2015-0003: CVE-2015-5247 denial of service through root-squash NFS storage pools
by Eric Blake 12 Sep '15

12 Sep '15

Libvirt Security Notice: LSN-2015-0003 ====================================== Summary: denial of service through root-squash NFS storage pools Reported on: 20150814 Published on: 20150903 Fixed on: 20150903 Reported by: Han Han <hhan(a)redhat.com> Patched by: John Ferlan <jferlan(a)redhat.com> See also: CVE-2015-5247 Description ----------- The virStorageVolCreateXML API had a bug where it could create a volume on a root-squash NFS mount, but then fail to remove that volume if later steps during the API encountered problems. This was further compounded by code which used a wrong conditional on whether the new volume needed to have permissions changed, making it more likely to trigger the failed unlink attempt. Poor error handling after a failed unlink left libvirt with an inconsistent view of the storage volume that could then result in a libvirtd crash. While the libvirtd crash might be delayed until by subsequent actions from a read-only connection, the conditions that set up the crash can only be triggered by a client with a read-write connection. Impact ------ When using fine-grained Access Control Lists (ACL), the virStorageVolCreateXML API only requires the storage_vol:create permission. A client with this privilege but lacking the more-powerful domain:write permission could exploit the API bugs to cause a denial-of-service attack by taking down libvirtd through a crash. It can also be argued that the ability to cause libvirt to create files which it cannot delete can be used as a denial-of-service attack on storage resources. Workaround ---------- The problems with libvirt creating a file which it does not then clean up on error is specific to root-squash NFS, so one mitigation is avoiding the use of the root-squash option when exporting NFS volumes for use by libvirt storage pools. Note that in general, the use of root-squash NFS does not add any real security (it makes certain tasks harder for a root user, but the root user can trivially change ids to another user to still perform those tasks). Furthermore, it is possible to prevent the denial of service attacks by stopping the use of the fine grained access control mechanism (while this does not prevent a crash, such a crash is no longer a security problem as there is no longer a privilege boundary between a user creating a volume and a user with full system access). Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v1.2.14 Broken in: v1.2.15 Broken in: v1.2.16 Broken in: v1.2.17 Broken in: v1.2.18 Broken in: v1.2.19 Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89 Fixed by: db9277a39bc364806e8d3e08a08fc128d59b7094 Fixed by: 691dd388aee99f8b06177540303b690586d5f5b3 Fixed by: 35847860f65f92e444db9730e00cdaef45198e0c Branch: v1.2.14-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Fixed by: 605b12068392d29beb44a8ab7d6ec176d6b05237 Fixed by: 454cb7c40dbcff84192094963d71369ac7d94546 Branch: v1.2.15-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Fixed by: 3c41b3ea5e68f391b8ff901082608bda5f7f3fbc Fixed by: fe2cf73800e3be87d1d4d811facb3f2be48126e5 Branch: v1.2.16-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89 Fixed by: 9e48400f4606bac16b7e4db195f610928c3d5a04 Fixed by: 2f4b41861c1729ff4b754986782d7428ccdca455 Fixed by: 7f0505705c70f7eb1e435a2e7732d1a74abfadfd Branch: v1.2.17-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89 Fixed by: d055989083df4bf68eb1388d327ebffb3501bb83 Fixed by: 98242f94cd181f0257535479369054f07f951b21 Fixed by: a3ee6885d95a2ce6fb7e58bb0737cfb1612e0fb7 Branch: v1.2.18-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89 Fixed by: e63b32e22dafd99547f82f5383fdbf58b5f651a1 Fixed by: 075eb526c9817d9d8e3a759e3fbe180d8d326dcf Fixed by: 966cc922221be2b8cc6a9842ed0dc4cf1568a7b3 Branch: v1.2.19-maint Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89 Fixed by: e0025d2967bbe3f283937216c9e2c12b6e9d1010 Fixed by: 8b1d84e640f1a6e6ebb47caf23a664e2f651b32d Fixed by: 3468542f06f6f5dc94defa1603c6a6adea3e2da8 -- Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org

1 0

[Libvirt-announce] Release of libvirt-1.2.19
by Daniel Veillard 02 Sep '15

02 Sep '15

It's out ! Tagged in git, signed tarball and rpms are available from the usual place: ftp://libvirt.org/libvirt/ I also pushed the python bindings out at: ftp://libvirt.org/libvirt/python This is still a relatively small release at around 200 commits, but with user noticeable features rolled in, as long with the usual set of bug fixes and improvements: Features: - Big improvements on ppc64 support (Andrea Bolognani) - New virDomainRename API (Tomas Meszaros) - Support for QEMU new pci emulations (Laine Stump) Documentation: - Rename page about vz driver (Sergey Bronnikov) - docs: Rename 'parallels' to 'vz' (Sergey Bronnikov) - virDomainRename: Extend API documentation (Tomas Meszaros) - virt-aa-helper: document --probing and --dry-run (Guido Günther) - docs: Drop unused rule for internals/%.html.tmp target (Guido Günther) - api: Adjust comment for virDomainAddIOThread (John Ferlan) - fix typo in comments (Cao jin) - virDomainCoreDumpWithFormat: Mention enum for @dumpformat (Michal Privoznik) Portability: - lxc: ensure setns() syscall is defined (Daniel P. Berrange) - selinux: fix compile errors (Guido Günther) - util: fix build without cgroup (Roman Bogorodskiy) - build: fix mingw build (Eric Blake) - protocol: Don't use rename as a variable name (Martin Kletzander) - Remove static keyword from vshReadline when readline does not exist (Moshe Levi) - Detect location of qemu-bridge-helper (Guido Günther) - Check if qemu-bridge-helper exists and is executable (Guido Günther) - nodeinfo: Fix build failure when KVM headers are not available (Andrea Bolognani) Bug Fixes: - apparmor: Adjust path to domain monitor socket (Guido Günther) - util: fallback to ioctl(SIOCBRDELBR) if netlink RTM_DELLINK fails (Laine Stump) - util: fallback to ioctl(SIOCBRADDBR) if netlink RTM_NEWLINK fails (Laine Stump) - Revert "LXC: show used memory as 0 when domain is not active" (Jim Fehlig) - libxl: acquire a job when receiving a migrating domain (Jim Fehlig) - libxl: don't attempt to resume domain when suspend fails (Jim Fehlig) - libxl: fix ref counting of libxlMigrationDstArgs (Jim Fehlig) - libvirt_lxc: Claim success for --help (Michal Privoznik) - util: Allow virProcessSetNamespaces() to have sparse FD list (Michal Privoznik) - virt-aa-helper: Improve valid_path (Michal Privoznik) - lxc: Resolve Coverity RESOURCE_LEAK (John Ferlan) - qemu: Emit correct audit message for memory hot unplug (Luyao Huang) - qemu: Emit correct audit message for memory hot plug (Luyao Huang) - hostdev: skip ACS check when using VFIO for device assignment (Laine Stump) - qemu: Label correct per-VM path when starting (Martin Kletzander) - qemu: Update blkio.weight value after successful set (Luyao Huang) - Eliminate incorrect and unnecessary check for changed IP address (Vasiliy Tolstov) - storage: only run safezero if allocation is > 0 (Guido Günther) - virt-aa-helper: allow access to /usr/share/ovmf/ (intrigeri) - qemu: Fix access to auto-generated socket paths (Martin Kletzander) - cpu: Move check for NULL CPU model inside the driver (Andrea Bolognani) - qemu: Sync BlkioDevice values when setting them in cgroups (Martin Kletzander) - lxc: Sync BlkioDevice values when setting them in cgroups (Martin Kletzander) - qemuDomainRename: Don't leave a domain locked uppon fail (Michal Privoznik) - qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (John Ferlan) - virsh: Reset global error after successfull domain lookup (Luyao Huang) - libvirt-domain: forbid use virDomainRename in readonly connection (Luyao Huang) - virsh: fix always return false in domrename (Luyao Huang) - qemu: Resolve Coverity UNINIT (John Ferlan) - qemu: Fix segfault when parsing private domain data (Martin Kletzander) - conf: Check for hostdev conflicts when assign default disk address (John Ferlan) - conf: Add SCSI hostdev check for disk drive address already in use (John Ferlan) - Revert "qemu: Allow to plug virtio-net-pci into PCIe slot" (Laine Stump) - domain: Fix crash if trying to live update disk <serial> (Cole Robinson) - util: don't overwrite stack when getting ethtool gfeatures (Laine Stump) - cpu: Fix segfault in the ppc64 driver (Andrea Bolognani) - conf: Don't try formating non-existing addresses (Martin Kletzander) - qemu: fail on attempts to use <filterref> for non-tap network connections (Laine Stump) - network: validate network NAT range (Laine Stump) - qemu: Enable ioeventfd usage for virtio-scsi controllers (Martin Kletzander) - virNetDevBandwidthParseRate: Reject negative values (Michal Privoznik) - network: verify proper address family in updates to <host> and <range> (Laine Stump) - virDomainDefParseXML: Check for malicious cpu ids in <numa/> (Michal Privoznik) - qemu: Fix reporting of physical capacity for block devices (Peter Krempa) - qemu: Build correct command line for PCI NICs on ARM (Pavel Fedin) - qemu: Forbid image pre-creation for non-shared storage migration (Peter Krempa) - conf: Resolve Coverity FORWARD_NULL (John Ferlan) - virsh: fix domfsinfo output in quiet mode (Luyao Huang) - Avoid starting a PowerPC VM with floppy disk (Kothapally Madhu Pavan) - Caps: Disable floppy disk for PowerPC VM (Kothapally Madhu Pavan) - qemu: fix some api cannot work when disable cpuset in conf (Luyao Huang) Improvements: - src: Check for symbols ordering in ADMIN_SYM_FILES (Michal Privoznik) - src: Cleanup libvirt_admin.syms (Michal Privoznik) - src: Check libvirt_admin.syms for exported symbols (Michal Privoznik) - lxc_container: Turn lxcAttachNS into calling virProcessSetNamespaces (Michal Privoznik) - utils: Remove the logging of errors from virNetDevSendEthtoolIoctl (Moshe Levi) - Start daemon only after filesystems are mounted (Martin Kletzander) - virt-aa-helper: add NVRAM store file for read/write (Peter Kieser) - Fix link to page for Virtuozzo driver (Sergey Bronnikov) - lxc: Inherit namespace feature (ik.nitk) - qemu: add a check for nodeset in qemuDomainSetNumaParamsLive (Luyao Huang) - virt-aa-helper: Simplify restriction logic (Guido Günther) - tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (Martin Kletzander) - security_dac: Add SetDirLabel support (Martin Kletzander) - security_selinux: Add SetDirLabel support (Martin Kletzander) - security_stack: Add SetDirLabel support (Martin Kletzander) - security: Add virSecurityDomainSetDirLabel (Martin Kletzander) - security_dac: Label non-listening sockets (Martin Kletzander) - security_selinux: Use proper structure to access socket data (Martin Kletzander) - locking: Remove redundant 'srv' element from virLockDaemon (Erik Skultety) - tests: Add some compatibility-related cases to the CPU tests (Andrea Bolognani) - cpu: Better support for ppc64 compatibility modes (Andrea Bolognani) - cpu: Don't update host-model guest CPUs on ppc64 (Andrea Bolognani) - Add generated libvirt_admin.syms into .gitignore (Martin Kletzander) - conf: Check for attach disk usage of iothread=0 (John Ferlan) - libvirt-admin: Generate symbols file (Guido Günther) - daemon: Use $(NULL) for libvird_admin's flags (Guido Günther) - virconf: correct code formatting (Cao jin) - virConfWalk: fix the inconsistent name (Cao jin) - qemu: Report better error message when renaming to existing domain name (Martin Kletzander) - util: Add getters for cgroup block device I/O throttling (Martin Kletzander) - util: Add virCgroupGetBlockDevString (Martin Kletzander) - util: Add virStringGetFirstWithPrefix (Martin Kletzander) - api: Remove check on iothread_id arg in virDomainPinIOThread (John Ferlan) - qemuDomainAddCgroupForThread: Don't overwrite the error (Luyao Huang) - virconf: fix the inconsistent name (Cao jin) - qemuDomainRename: Explicitly check if domain is renaming to itself (Michal Privoznik) - virHashAddEntry: Report error on duplicate key (Michal Privoznik) - virHashAddOrUpdateEntry: Turn @new_name into void * (Michal Privoznik) - tools: Introduce new client generic module vsh (Erik Skultety) - qemu: Implement virDomainRename (Tomas Meszaros) - Introduce new VIR_DOMAIN_EVENT_DEFINED_RENAMED event (Tomas Meszaros) - domain_conf: Introducde virDomainObjListRenameAddNew() & virDomainObjListRenameRemove() (Tomas Meszaros) - virsh: Implement "domrename" command (Tomas Meszaros) - Introduce virDomainRename API (Tomas Meszaros) - conf: Remove 'vmdef' from virDomainHostdevDefParseXML (John Ferlan) - qemu: Use numad information when getting pin information (Martin Kletzander) - qemu: Keep numad hint after daemon restart (Martin Kletzander) - conf: Pass private data to Parse function of XML options (Martin Kletzander) - conf: Create locals for virDomainDiskDefAssignAddress (John Ferlan) - Drive hot-unplug: reliable parsing of HMP results (Frank Schreuder) - cmdAttachInterface: Fully implement @floor support (Michal Privoznik) - networkBandwidthGenericChecks: Drop useless check (Michal Privoznik) - networkBandwidthUpdate: Don't blindly dereference pointers (Michal Privoznik) - virsh: Refactor parseRateStr to avoid false-positive uninitialized variable (Peter Krempa) - qemu: fix qemuDomainSupportsPCI() for ARM machines of "virt" machinetype (Laine Stump) - virNetSocketCheckProtocols: handle EAI_NONAME as IPv6 unavailable (Guido Günther) - qemu: Implement VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik) - virsh: Implement VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik) - Introduce VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik) - virsh: Rework parseRateStr (Michal Privoznik) - qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (Michal Privoznik) - bridge_driver: Introduce networkBandwidthUpdate (Michal Privoznik) - bridge_driver: Introduce networkBandwidthChangeAllowed (Michal Privoznik) - virNetDevBandwidthUpdateRate: turn class_id into integer (Michal Privoznik) - virNetDevParseMcast: Avoid magic constant (Michal Privoznik) - tests: Add a bunch of cpu test case for ppc64 (Andrea Bolognani) - tests: Re-enable ppc64 cpu tests (Andrea Bolognani) - cpu: Forbid model fallback in the ppc64 driver (Andrea Bolognani) - cpu: Implement backwards compatibility in the ppc64 driver (Andrea Bolognani) - cpu: Add POWER8NVL information to CPU map XML (Andrea Bolognani) - cpu: Parse and use PVR masks in the ppc64 driver (Andrea Bolognani) - cpu: Simplify ppc64 part of CPU map XML (Andrea Bolognani) - cpu: Support multiple PVRs in the ppc64 driver (Andrea Bolognani) - cpu: Align ppc64 CPU data with x86 (Andrea Bolognani) - tests: Temporarily disable ppc64 cpu tests (Andrea Bolognani) - cpu: Use ppc64Compute() to implement ppc64DriverCompare() (Andrea Bolognani) - cpu: CPU model names have to match on ppc64 (Andrea Bolognani) - cpu: Never skip CPU model name check in ppc64 driver (Andrea Bolognani) - tests: Improve result handling in cpuTestGuestData() (Andrea Bolognani) - cpu: Reorder functions in the ppc64 driver (Andrea Bolognani) - cpu: Simplify ppc64ModelFromCPU() (Andrea Bolognani) - cpu: Simplify NULL handling in ppc64 driver (Andrea Bolognani) - cpu: Mark driver functions in ppc64 driver (Andrea Bolognani) - admin: Drop 'internal.h' include from libvirt-admin.h (Erik Skultety) - conf: Add ioeventfd option for controllers (Martin Kletzander) - qemuMonitorOpenInternal: remove redundant code (Cao jin) - rpc: Remove keepalive_required option (Martin Kletzander) - qemu: support new pci controller model "pcie-switch-downstream-port" (Laine Stump) - conf: new pcie-controller model "pcie-switch-downstream-port" (Laine Stump) - qemu: add capabilities bit for device xio3130-downstream (Laine Stump) - qemu: support new pci controller model "pcie-switch-upstream-port" (Laine Stump) - conf: new pci controller model "pcie-switch-upstream-port" (Laine Stump) - qemu: add capabilities bit for device x3130-upstream (Laine Stump) - qemu: support new pci controller model "pcie-root-port" (Laine Stump) - conf: new pci controller model "pcie-root-port" (Laine Stump) - qemu: add capabilities bit for device ioh3420 (Laine Stump) - qemu: implement <target chassisNr='n'/> subelement/attribute of <controller> (Laine Stump) - conf: add new <target> subelement with chassisNr attribute to <controller> (Laine Stump) - qemu: implement <model> subelement to <controller> (Laine Stump) - conf: add new <model> subelement with name attribute to <controller> (Laine Stump) - conf: more useful error message when pci function is out of range (Laine Stump) - numa_conf: Introduce virDomainNumaGetMaxCPUID (Michal Privoznik) - Allow vfio hotplug of a device to the domain which owns the iommu (Shivaprasad G Bhat) - qemuDomainDefPostParse: Adjust indent (Michal Privoznik) - bootstrap: Don't require python-config (Michal Privoznik) - qemu: Allow to plug virtio-net-pci into PCIe slot (Pavel Fedin) - qemu: Add PCI-Express root to ARM virt machine (Pavel Fedin) - qemu: Introduce QEMU_CAPS_OBJECT_GPEX (Pavel Fedin) - cpu: Indentation changes in the ppc64 driver (Andrea Bolognani) - cpu: Rename {powerpc,ppc} => ppc64 (internal symbols) (Andrea Bolognani) - cpu: Rename {powerpc,ppc} => ppc64 (exported symbols) (Andrea Bolognani) - cpu: Rename {powerpc,ppc} => ppc64 (filesystem) (Andrea Bolognani) - tests: extend workaround for gnutls private key loading failure (Daniel P. Berrange) - conf: Allow error reporting in virDomainDiskSourceIsBlockType (John Ferlan) - docs: Add Fibre Channel NPIV supported option for volume lun config (John Ferlan) - conf: Change when virDomainDiskDefAssignAddress is called (John Ferlan) - conf: Remove unused param from virDomainHostdevDefParseXML (John Ferlan) - conf: Change when virDomainHostdevAssignAddress is called (John Ferlan) - conf: Try controller add when searching hostdev bus for unit (John Ferlan) - conf: Add check for host address type while checking in use (John Ferlan) - conf: Add xmlopt to virDomainDeviceDefPostParseInternal (John Ferlan) - conf: Move hostdev and disk address validations (John Ferlan) - conf: Add 'bus' and 'target' to SCSI address conflict checks (John Ferlan) - conf: Remove extraneous check in virDomainHostdevAssignAddress (John Ferlan) - qemu: Remove double unlock for domains (Martin Kletzander) - tests: Add subcores3 nodeinfo test (Andrea Bolognani) - tests: Add subcores2 nodeinfo test (Andrea Bolognani) - tests: Add subcores1 nodeinfo test (Andrea Bolognani) - tests: Prepare for subcore tests (Shivaprasad G Bhat) - nodeinfo: Fix output on PPC64 KVM hosts (Shivaprasad G Bhat) - rpc: Fix slow volume download (virsh vol-download) (Ossi Herrala) - There is no virDomainFindBy{ID, Name, UUID} anymore (Cao jin) - Post-release version bump to 1.2.19 (Martin Kletzander) - Fix a trailing space in spec file (Daniel Veillard) Cleanups: - Revert "lxc: ensure setns() syscall is defined" (Michal Privoznik) - test: Replace tabs with spaces in virnetdaemondata json files (Erik Skultety) - tests: Remove unused file (Andrea Bolognani) - cpu: Remove ISA information from CPU map XML (Andrea Bolognani) So thanks everybody for your contributions to this release, be it bug reports, patches, new code, dcumentation, etc ... Enjoy ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.19
by Daniel Veillard 31 Aug '15

31 Aug '15

So I have tagged rc1 in git and pushed signed tarball and rpms to the usual place: ftp://libvirt.org/libvirt/ The release works just fine in my limited testing, but others should try it out to check portability and more advanced functionalities. I will likely push rc2 at the end of the week-end and the final release on Tuesday or Wednesday, assuming no big issue is raised in the meantime. thanks for giving it a try. I also note that we have some CI test failing, not for core libvirt but perl bindings, virt-manager, ... it would be good to investigate before we push the release: https://ci.centos.org/view/libvirt-project/ thanks ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-1.2.18
by Daniel Veillard 03 Aug '15

03 Aug '15

It's out ! Tagged in git and with signed tarball and rpms on the server at the usual place: ftp://libvirt.org/libvirt/ I also made a libvirt-python release found at: ftp://libvirt.org/libvirt/python/ This is a rather small size release, the libxl support for dom0 being the main feature from an user POV, but there is as usual a number of bug fixes and improvements across the code: Features: Documentation: - fix typo in qemu_monitor (Cao jin) - docs: bhyve: document clock configuration (Roman Bogorodskiy) - viraccessperm.h: Fix some typos (Michal Privoznik) - docs: Document how libvirt handles companion controllers (Martin Kletzander) - daemonRunStateInit: Fix a typo on a comment (Michal Privoznik) Portability: - netdev: fix build on FreeBSD (Roman Bogorodskiy) - spec: Fix polkit dep on F23 (Cole Robinson) - nodeinfo: fix build on FreeBSD (Roman Bogorodskiy) - Escape left brace as new perl suggests (Martin Kletzander) Bug Fixes: - qemu: Do not reset labels when migration fails (Jiri Denemark) - qemu: Reject migration with memory-hotplug if destination doesn't support it (Peter Krempa) - Load nbd module before running qemu-nbd (Cédric Bosdonnat) - lxc: Don't accidentaly reset autostart flag in virLXCProcessCleanup (Peter Krempa) - remote: fix typo in remoteDomainOpenGraphicsFD (Daniel P. Berrange) - qemu: Check for iotune_max support properly (Martin Kletzander) - Renamed deconfigured-cpus to allow make dist (Daniel Veillard) - storage: allow zero capacity with non-backing file to be created (Chris J Arges) - nodeinfo: Check for SYSFS_INFINIBAND_DIR before open (John Ferlan) - qemu: fix the error cover issue in SetMemoryParameters (Luyao Huang) - nodeinfo: Fix nodeGetCPUBitmap()'s fallback code path (Andrea Bolognani) - tests: Restore links in deconfigured-cpus nodeinfo test (Andrea Bolognani) - cgroup: Drop resource partition from virSystemdMakeScopeName (Peter Krempa) - qemu: Reject updating unsupported disk information (Martin Kletzander) - storage: Fix pool building when directory already exists (Christophe Fergeau) - rpc: ensure daemon is spawn even if dead socket exists (Daniel P. Berrange) - rbd: Return error from rbd_create for message processing (John Ferlan) - qemuMigrationRun: Don't leak @fd (Michal Privoznik) - Fix qemu-nbd cleanup crashes (Cédric Bosdonnat) - network: Add another collision check into networkCheckRouteCollision (Martin Kletzander) - nodeinfo: fix to parse present cpus rather than possible cpus (Kothapally Madhu Pavan) - libxl: set dom0 state to running (Jim Fehlig) - rpc: Rework timerActive logic in daemon (Martin Kletzander) - qemu: Check duplicate WWNs also for hotplugged disks (Peter Krempa) - Fix cloning of raw, sparse volumes (Prerna Saxena) - qemu: don't use initialized ret in qemuRemoveSharedDevice (Guido Günther) - qemu: report error for non-existing disk in blockjobinfo (Luyao Huang) - conf: Don't allow duplicated target names regardless of bus (John Ferlan) - storage: Revert volume obj list updating after volume creation (4749d82a) (Erik Skultety) - qemu: Fix integer/boolean logic in qemuSetUnprivSGIO (John Ferlan) - qemu: report error when shmem has an invalid address (Luyao Huang) - qemu: Auto assign pci addresses for shared memory devices (Luyao Huang) - vz: use PRL_USE_VNET_NAME_FOR_BRIDGE_NAME (Maxim Nestratov) - Explicitly format the isa-fdc controller for newer q35 machines (Ján Tomko) - virt-aa-helper: add unix channels for nserials as well (Serge Hallyn) - storage: Fix regression in storagePoolUpdateAllState (Erik Skultety) - better patch for the XSS search issue (Daniel Veillard) - Avoid XSS vulnerability on the search engine (Daniel Veillard) - vz: fix SDK event dispatching (Nikolay Shirokovskiy) - util: Avoid Coverity FORWARD_NULL (John Ferlan) - virsh: report error if vcpu number exceed the guest maxvcpu number (Luyao Huang) - virt-aa-helper: Fix permissions for vhost-user socket files (Michal Dubiel) Improvements: - qemu: Properly check for incoming migration job (Jiri Denemark) - Fix syntax-check: missing "%s" (Cédric Bosdonnat) - qemu: Adjust VM id allocation (Erik Skultety) - admin: Tiny cleanups (Martin Kletzander) - tests: Finish rename of the long nodeinfo test case (Martin Kletzander) - conf: add virDomainControllerDefNew() (Laine Stump) - qemu: reorganize loop in qemuDomainAssignPCIAddresses (Laine Stump) - conf: pay attention to bus minSlot/maxSlot when autoassigning PCI addresses (Laine Stump) - tests: add vol-qcow2-zerocapacity test to storagevolxml2argvtest (Chris J Arges) - Revert "qemu: Use heads parameter for QXL driver" (Martin Kletzander) - test: introduce a function in test driver to check get vcpupin info (Luyao Huang) - conf: reorganize virNetworkDHCPDefParseXML (Laine Stump) - nodeinfo: Check for errors when reading core_id (Andrea Bolognani) - bhyve: add UTC clock support (Roman Bogorodskiy) - configure: clarify rationale for checking pkcheck (Daniel P. Berrange) - nodeinfo: Calculate present and online CPUs only once (Andrea Bolognani) - nodeinfo: Use a bitmap to keep track of node CPUs (Andrea Bolognani) - nodeinfo: Use nodeGetOnlineCPUBitmap() when parsing node (Andrea Bolognani) - nodeinfo: Phase out cpu_set_t usage (Andrea Bolognani) - nodeinfo: Rename nodeGetCPUBitmap() to nodeGetOnlineCPUBitmap() (Andrea Bolognani) - nodeinfo: Remove out parameter from nodeGetCPUBitmap() (Andrea Bolognani) - nodeinfo: Add old kernel compatibility to nodeGetPresentCPUBitmap() (Andrea Bolognani) - nodeinfo: Rename linuxParseCPUmax() to linuxParseCPUCount() (Andrea Bolognani) - nodeinfo: Introduce linuxGetCPUOnlinePath() (Andrea Bolognani) - nodeinfo: Introduce linuxGetCPUGlobalPath() (Andrea Bolognani) - nodeinfo: Add nodeGetPresentCPUBitmap() to libvirt_private.syms (Andrea Bolognani) - virsh: Refactor block job waiting in cmdBlockCopy (Peter Krempa) - virsh: Refactor block job waiting in cmdBlockCommit (Peter Krempa) - virsh: Refactor block job waiting in cmdBlockPull (Peter Krempa) - qemu: Update state of block job to READY only if it actually is ready (Peter Krempa) - virsh: Refactor argument handling in cmdBlockPull (Peter Krempa) - virsh: Refactor argument handling in cmdBlockCopy (Peter Krempa) - virsh: Refactor argument checking in cmdBlockCommit (Peter Krempa) - virsh: Kill blockJobImpl by moving the final impl into cmdBlockCommit (Peter Krempa) - virsh: Split out block pull implementation from blockJobImpl (Peter Krempa) - virsh: block job: separate abort from blockJobImpl (Peter Krempa) - virsh: blockjob: Split out vshBlockJobSetSpeed from blockJobImpl (Peter Krempa) - virsh: cmdBlockJob: Switch to declarative flag interlocking (Peter Krempa) - virsh: blockjob: Extract block job info code into a separate function (Peter Krempa) - nodedev: add RDMA and tx-udp_tnl-segmentation NIC capabilities (Moshe Levi) - qemu: Use heads parameter for QXL driver (Frediano Ziglio) - rbd: Use RBD format 2 by default when creating images. (Wido den Hollander) - virsh: Don't output node frequency if unknown (Martin Kletzander) - qemu: Test for virtio-9p-ccw support (Boris Fiuczynski) - qemu: Make virtio-9p-ccw the default for s390-ccw-virtio machines (Boris Fiuczynski) - qemu: Support for virtio-9p-ccw (Boris Fiuczynski) - virsh: Teach cmdFreepages to work with lxc driver (Michal Privoznik) - cmdVcpuPin: Remove dead code (Michal Privoznik) - lxc: wait for nbd device to be up to get its PIDs (Cédric Bosdonnat) - nodeinfo: Formatting changes (Andrea Bolognani) - nodeinfo: Make sysfs_prefix usage more consistent (Andrea Bolognani) - qemu: process: Improve update of maximum balloon state at startup (Peter Krempa) - qemuDomainSetNumaParamsLive: Check for NUMA mode more wisely (Michal Privoznik) - conf: Add getter for network routes (Martin Kletzander) - tests: Add nodeinfo test for non-present CPUs (Andrea Bolognani) - nodeinfo: Add sysfs_prefix to nodeGetMemoryStats (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeCapsInitNUMA (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeGetInfo (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeGetCPUMap (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeGetCPUBitmap (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeGetPresentCPUBitmap (John Ferlan) - nodeinfo: Add sysfs_prefix to nodeGetCPUCount (John Ferlan) - nodeinfo: Introduce local linuxGetCPUPresentPath (John Ferlan) - virt-driver-vz: Require parallels-7.0.22 at least (Michal Privoznik) - configure: Move Virtuozzo checks to a specific module (Michal Privoznik) - qemuProcessHandleMigrationStatus: Update migration status more frequently (Michal Privoznik) - vz: fix cleanup of nets of bridged type (Dmitry Guryanov) - qemu: Use error from Finish instead of "unexpectedly failed" (Jiri Denemark) - qemu: Don't report false error from MigrateFinish (Jiri Denemark) - qemu: Remember incoming migration errors (Jiri Denemark) - Introduce virErrorCopyNew (Jiri Denemark) - Introduce virHashAtomic (Jiri Denemark) - cpu: Add support for MPX and AVX512 Intel features (Jiri Denemark) - virt-aa-helper: add DomainGuest to mockup caps (Cédric Bosdonnat) - virt-aa-helper: rename ctl->hvm to ctl->os (Cédric Bosdonnat) - Get more libvirt errors from virt-aa-helper (Cédric Bosdonnat) - virt-aa-helper: fix rules for paths with trailing slash (Cédric Bosdonnat) - rpc: Add virNetDaemonHasClients (Martin Kletzander) - Rewrite allocation tracking when cloning volumes (Ján Tomko) - qemu: Drop LFs at the end of error from QEMU log (Jiri Denemark) - qemu: Log all arguments of qemuProcessStart (Jiri Denemark) - qemu: Wait for migration events on domain condition (Jiri Denemark) - qemu: Update migration state according to MIGRATION event (Jiri Denemark) - qemuDomainGetJobStatsInternal: Support migration events (Jiri Denemark) - qemu: Enable migration events on QMP monitor (Jiri Denemark) - qemu_monitor: Wire up MIGRATION event (Jiri Denemark) - qemu_hotplug: try harder to eject media (Pavel Hrdina) - monitor: detect that eject fails because the tray is locked (Pavel Hrdina) - virDomainObjSignal: drop this function (Pavel Hrdina) - virCondWaitUntil: add another return value (Pavel Hrdina) - qemu: Refactor qemuSetUnprivSGIO return values (John Ferlan) - qemu: Inline qemuGetHostdevPath (John Ferlan) - qemu: Refactor qemuCheckSharedDisk to create qemuCheckUnprivSGIO (John Ferlan) - libxl: rework setting the state of virDomainObj (Jim Fehlig) - libxl: support dom0 (Jim Fehlig) - qemu: Introduce qemuGetHostdevPath (John Ferlan) - qemu: Introduce qemuIsSharedHostdev (John Ferlan) - docs: Clarify unprivileged sgio feature (John Ferlan) - conf: use virDomainChrSourceDef to save server path (Luyao Huang) - qemu: Refactor creation of shared memory device commandline (Luyao Huang) - qemu: Assign IDs for shared memory devices (Luyao Huang) - Separate isa-fdc options generation (Ján Tomko) - Add support for portable-rpcgen from portablexdr library (Pavel Fedin) - Remove explicit enum from protocol structures (Pavel Fedin) - util: bitmap: Don't alloc overly large binary bitmaps (Peter Krempa) - vz: Use virBitmapToDataBuf instead of virBitmapToData in vzDomainGetVcpus (Peter Krempa) - vz: Remove dead code from vzDomainGetVcpus (Peter Krempa) - qemu: move the guest status check before agent config and status check (Luyao Huang) - qemu: remove deadcode in qemuDomain{HelperGetVcpus|GetIOThreadsLive} (Luyao Huang) - vz: assign static IPs and default gateways for network adapter (Mikhail Feoktistov) - vz: fix building capabilities (Dmitry Guryanov) - qemu_driver: live/config checks cleanup (Pavel Hrdina) - Post-release version bump to 1.2.18 (Michal Privoznik) - cpu_map.xml: Expand Opteron_G4 CPU model (Jiri Denemark) - cpu_map.xml: Expand Opteron_G2 CPU model (Jiri Denemark) - cpu_map.xml: Expand Opteron_G1 CPU model (Jiri Denemark) - cpu_map.xml: Expand Broadwell-noTSX CPU model (Jiri Denemark) - cpu_map.xml: Expand Haswell-noTSX CPU model (Jiri Denemark) - cpu_map.xml: Expand SandyBridge CPU model (Jiri Denemark) - cpu_map.xml: Expand Westmere CPU model (Jiri Denemark) - cpu_map.xml: Expand Nehalem CPU model (Jiri Denemark) - cpu_map.xml: Expand Penryn CPU model (Jiri Denemark) - cpu_map.xml: Expand Conroe CPU model (Jiri Denemark) - cpu_map.xml: Expand kvm64 CPU model (Jiri Denemark) - cpu_map.xml: Expand cpu64-rhel5 CPU model (Jiri Denemark) - cpu_map.xml: Expand kvm32 CPU model (Jiri Denemark) - cpu_map.xml: Expand qemu32 CPU model (Jiri Denemark) - cpu_map.xml: Expand n270 CPU model (Jiri Denemark) - cpu_map.xml: Expand coreduo CPU model (Jiri Denemark) - cpu_map.xml: Expand pentiumpro CPU model (Jiri Denemark) - cpu_map.xml: Expand pentium2 CPU model (Jiri Denemark) - cpu_map.xml: Expand pentium CPU model (Jiri Denemark) - cpu_map.xml: Expand 486 CPU model (Jiri Denemark) - cpu_map.xml: Sort features in x86 CPU models (Jiri Denemark) Thanks everybody who helped make that release, with patches, ideas, bug reports, documentation, etc ... Enjoy, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.18
by Daniel Veillard 31 Jul '15

31 Jul '15

As planned and after pushing the small fix for the 'make dist' issue I have tagged in git the candidate release 1 and pushed signed tarballs and rpms to the usual place: ftp://libvirt.org/libvirt/ Seems to work so far for me, please give it a try ! I think I will push rc2 on Wed or Thu and have the release over next week-end, Play with it, thanks ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] ANNOUNCE: libvirt-glib version 0.2.2 released
by Daniel P. Berrange 21 Jul '15

21 Jul '15

I am pleased to announce that a new release of the libvirt-glib package, version 0.2.2, is now available from ftp://libvirt.org/libvirt/glib/ The packages are GPG signed with Key fingerprint: DAF3 A6FD B26B 6291 2D0E 8E3F BE86 EBB4 1510 4FDF (4096R) Changes in this release: - Add API for getting interface MAC address - Simplify implementation of object listing APIs - Fix memory leaks of virConnect objects - Port to use GTask instead of GSimpleAsyncResult - Add API to get list of physical network interfaces - Add API to get list of virtual networks - Add API to get DHCP address of virtual networks - Avoid overwriting filesystem type when setting format - Include XML data for tests in dist - Add support for UNIX chardev sources - Fix test linking on platforms with strict linker deps - Add ability to set video ram + vgamem libvirt-glib comprises three distinct libraries: - libvirt-glib - Integrate with the GLib event loop and error handling - libvirt-gconfig - Representation of libvirt XML documents as GObjects - libvirt-gobject - Mapping of libvirt APIs into the GObject type system NB: While libvirt aims to be API/ABI stable forever, with libvirt-glib we are not currently guaranteeing that libvirt-glib libraries are permanently API/ABI stable. That said we do not expect to break the API/ABI for the forseeable future and will always strive avoid it. Follow up comments about libvirt-glib should be directed to the regular libvir-list(a)redhat.com development list. Thanks to all the people involved in contributing to this release. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of libvirt-1.2.17
by Daniel Veillard 02 Jul '15

02 Jul '15

So as planned I tagged it in git, development is open again, I signed tarballs and rpms, they are at the usual place: ftp://libvirt.org/libvirt/ I also made a libvirt-python-1.2.17 release which you can find at ftp://libvirt.org/libvirt/python/ this is a rather large release, even if the Admin APIs didn't fully made it there is 375 commits, lot of refactoring and code hardening, and a fair amount of pure bug fixes: Features: - numerous improvements and refactoring of the parallels driver(Maxim Nestratov) - hardening of vcpu code (Peter Krempa) - hardening of migration code (Jiri Denemark) Documentation: - Fix typo incomaptible -> incompatible (Andrea Bolognani) - docs: Clarification for when allowed to use 'lun' for "volume" (John Ferlan) - docs: document when pcie-root/dmi-to-pci-bridge support was added (Laine Stump) - docs: Fix trivial copy-paste error (Martin Kletzander) - docs: Properly mark acl.html dependencies (Michal Privoznik) - docs: Correct typos in scsi hostdev and address elements (Eric Farman) - docs: Fix XML schema handling of LUN address in hostdev tag (Eric Farman) - virNetSocketRemoveIOCallback: Be explicit about unref (Michal Privoznik) - man: clarify usage of virsh blockcopy with --xml (Ján Tomko) - docs: Clarify that attribute name is not used for vhostuser (Maxime Leroy) - maint: document use of zanata for translations (Eric Blake) - qemu: Capitalize "storage" in qemuDomainAttachUSBMassStorageDevice() (Andrea Bolognani) - docs: php: remove reference to Red Hat (Ján Tomko) - monitor: Move documentation for qemuMonitorGetBalloonInfo (Peter Krempa) Portability: - admin: Fix mingw build by reordering includes (Martin Kletzander) - util: process: fix build on FreeBSD (Roman Bogorodskiy) - util: Properly return error from virGetUserID and virGetGroupID stubs (Peter Krempa) - build: silence ar warnings on rawhide (Eric Blake) - util: process: @pid in virProcessSetAffinity's BSD impl is not unused (Peter Krempa) - libxl: load on FreeBSD (Roman Bogorodskiy) Bug Fixes: - phyp: Resolve Coverity FORWARD_NULL (John Ferlan) - util: Resolve Coverity FORWARD_NULL (John Ferlan) - util: Resolve Coverity FORWARD_NULL (John Ferlan) - util: Resolve Coverity FORWARD_NULL (John Ferlan) - lxc: Don't pass a local variable address randomly (Michal Privoznik) - qemu: Resolve Coverity DEADCODE (John Ferlan) - qemu: Audit memory size with memory hotplug operations (Peter Krempa) - qemu: Avoid using ".(null)" in UNIX socket path (Jiri Denemark) - qemu: agent: Don't automatically disable CPU0 via guest agent (Peter Krempa) - qemu: End job even if exiting monitor after OpenGraphics(FD) fails (Luyao Huang) - qemu: properly free addresses on non-serial chardev unplug (Ján Tomko) - qemu: fix address allocation on chardev attach (Luyao Huang) - libxl: Set def->vcpus after successfully modifying live vcpu count (Jim Fehlig) - libxl: don't remove persistent domain on start failure (Jim Fehlig) - libxl: don't overwrite domain state from statedir config (Jim Fehlig) - qemu: Add missing on_crash lifecycle type (John Ferlan) - Use the correct symbol for 'onCrash' (John Ferlan) - mpath: Don't allow more than one mpath pool at a time (John Ferlan) - mpath: Update path in CheckPool function (John Ferlan) - conf: Validate disk lun using correct types (John Ferlan) - Storage: Introduce shadow vol for refresh while the main vol builds. (Prerna Saxena) - conf: storage: Fix duplicate check for gluster pools (Peter Krempa) - qemu: event: Properly handle spice events (Peter Krempa) - Revert "Introduce QEMU_CAPS_ARM_VIRT_PCI" (Peter Krempa) - qemu: Close the agent connection only on agent channel events (Peter Krempa) - storage: Set correct vol->type at VolCreate (John Ferlan) - qemu: Fix assignment of the default spicevmc channel name (Jiri Denemark) - qemu: Resolve Coverity RESOURCE_LEAK (John Ferlan) - test: qemu: Make sure that wr_highest_offset_valid gets set properly (Peter Krempa) - vz: Fix build after recent commit (Peter Krempa) - qemuBuildMemoryBackendStr: Honour passed @pagesize (Michal Privoznik) - qemuBuildMemoryBackendStr: Fix hugepages lookup process (Michal Privoznik) - conf: Format scheduler priority when it is zero (Luyao Huang) - qemu: Avoid removing persistent config if migration fails (Luyao Huang) - scsi: Force error for SCSI pools on virStorageBackendSCSIFindLUs failure (John Ferlan) - conf: Enforce scheduler name when parsing XML (Peter Krempa) - qemu: caps: Fix syntax-check failure in version based capabilities (Peter Krempa) - libxl: avoid freeing an uninitialised bitmap (Ian Campbell) - virNetServerServiceClose: Don't leak sockets (Michal Privoznik) - virNetSocket: Fix @watch corner case (Michal Privoznik) - daemonSetupNetworking: Don't leak services (Michal Privoznik) - scsi: Adjust return status from getBlockDevice (John Ferlan) - qemuMigrationDriveMirror: Force raw format for NBD (Michal Privoznik) - qemu: Jump to correct label in qemuDomainPinIOThread (Peter Krempa) - conf: Fix virDomainObjGetDefs when getting persistent config on a live vm (Peter Krempa) - rpc: Actually increase reference count on @srv in virNetDaemonAddServer (Peter Krempa) - parallels: Fix false error messages in libvirt log (Mikhail Feoktistov) - parallels: Fix initialization of buflen variable in each loop iteration (Mikhail Feoktistov) - nodedev: update netdev feature bits before each dumpxml (Laine Stump) - tests: Follow virnetserver to virnetdaemon transition (Michal Privoznik) - daemon: Distribute admin_server.h (Michal Privoznik) - daemon/Makefile: Add forgotten dependency (Michal Privoznik) - util: virfile: Fix 'unknown cause' error if NFS mount point creation fails (Erik Skultety) - util: Fix Coverity RESOURCE_LEAK (John Ferlan) - storage: Generate correct parameters for CIFS (John Ferlan) - rpc: Fix possible crash when MDNSAddEntry fails (Martin Kletzander) - qemu: emulatorpin: Don't reset pinning when pinning to all cpus (Peter Krempa) - storage: Disallow wiping an extended disk partition (John Ferlan) - storage: Need to set secrettype for direct iscsi disk volume (John Ferlan) - scsi: Need to translate disk source pool in config attach path (John Ferlan) - network: escape quotes for dsmasq conf contents (Shivaprasad G Bhat) - virsh: change-media: Fix behavior with --update without a source (Peter Krempa) - rpc: Fix reference counting around virNetSocketAddIOCallback (Daniel P. Berrange) - rpc: Don't use unrelated value as privateData of client (Daniel P. Berrange) - mdns: Set error when failing due to missing avahi (Martin Kletzander) - qemu: Update balloon info only if job is allowed (Peter Krempa) - conf: Fix mistakes in pointer usage in virDomainObjGetDefs (Peter Krempa) - check if console/channel PTY is null before attempting to open (Shivaprasad G Bhat) - virnetdev: fix moving of 802.11 phys (Lubomir Rintel) - util: process: Refactor and fix virProcessSetAffinity (Peter Krempa) - util: Clear output broadcast address before filling it in (Martin Kletzander) - virsh: Fix Ctrl-C behavior when watching a job (Jiri Denemark) - libxl: Unbreak vcpu pinning (Peter Krempa) - qemu: Fix possible crash in qemuProcessSetVcpuAffinities (Peter Krempa) - qemu: Do not release device address on successful RNG attach (Luyao Huang) - qemu: Need to return status of RNG device removal (Luyao Huang) - test: fix IP address range failure test (Laine Stump) - storage: RBD: do not return error when deleting non-existent volume (Erik Skultety) - storage: Don't update volume objs list before we successfully create one (Erik Skultety) - nwfilter: Fix sscanf off-by-one error in virNWFilterSnoopLeaseFileLoad (Erik Skultety) - virsh: Fix printing of XML for pool-create-as (John Ferlan) Improvements: - conf: qemu: Taint VMs using custom device tree blob (Peter Krempa) - conf: audit: Audit physical memory size rather than balloon request (Peter Krempa) - libxl: honor domainGetXMLDesc() --inactive flag (Jim Fehlig) - qemu: event: Clean up VNC monitor handling (Peter Krempa) - qemuxml2argv: Remove Haswell CPU from unrelated tests (Jiri Denemark) - Revert "Change livbirt version to 1.3.0 for the next release" (Martin Kletzander) - Temporarily disable admin API (Martin Kletzander) - spec: Remove admin package specification (Martin Kletzander) - qemu: ignore assumptions about hotplug requirement when address is from config (Laine Stump) - qemu: always permit PCI devices to be manually assigned to a PCIe bus (Laine Stump) - qemu: refactor qemuBuildControllerDevStr to eliminate future duplicate code (Laine Stump) - qemu: monitor: Remove qemuMonitorGetBlockExtent (Peter Krempa) - qemu: Refactor qemuDomainGetBlockInfo (Peter Krempa) - qemu: monitor: Open-code retrieval of wr_highest_offset (Peter Krempa) - internal: Introduce virCheckNonEmptyStringArgGoto and reuse it (Peter Krempa) - vz: add memory statistics (Nikolay Shirokovskiy) - vz: add vcpu statistics (Nikolay Shirokovskiy) - vz: cleanup, make in par net device lookup functions (Nikolay Shirokovskiy) - vz: add net dev statistiscs (Nikolay Shirokovskiy) - docs: Don't keep temporary files around (Michal Privoznik) - test: Refactor testNodeGetCPUMap (Peter Krempa) - test: Refactor vcpu pinning and vcpu info retrieval (Peter Krempa) - test: Refactor testDomainSetVcpusFlags (Peter Krempa) - test: Refactor test driver domain object retrieval (Peter Krempa) - test: Drop locked access to testDriver->domains (Peter Krempa) - test: Finalize removal of locking from driver->eventState (Peter Krempa) - test: Refactor test driver event sending (Peter Krempa) - test: Use atomic access to @nextDomID in struct virTestDriver (Peter Krempa) - test: Annotate few fields of testDriver structure (Peter Krempa) - test: Extract common parts of test driver data allocation (Peter Krempa) - test: Extract code to free testDriver into testDriverFree (Peter Krempa) - test: turn 'defaultConn' into a pointer (Peter Krempa) - test: Rename testConn to testDriver (Peter Krempa) - vz: Adapt to driver rename (Michal Privoznik) - json: enhance parser test (Eric Blake) - json: even stricter trailing garbage detection (Eric Blake) - json: reject trailing garbage (Eric Blake) - json: reject javascript comments (Eric Blake) - json: cope with older yajl semantics (Eric Blake) - vz: implementation of attach/detach network devices (Mikhail Feoktistov) - Test for the new watchdog model diag288 (Boris Fiuczynski) - Support for the new watchdog model diag288 (Boris Fiuczynski) - Test for the new watchdog action inject-nmi (Boris Fiuczynski) - Support for a new watchdog action inject-nmi (Boris Fiuczynski) - vircapstest: Properly report error for failed tests (Michal Privoznik) - conf: Adjust invalid secrettype setting during parse (John Ferlan) - conf: improve the way we format blkiotune and cputune (Luyao Huang) - Improve some errors for openconsole/channel (Luyao Huang) - storage: Force setting of disk format type (John Ferlan) - docs: Adjust Disk storage rng (John Ferlan) - Convert SCSI logical unit from unsigned int to unsigned long long (Eric Farman) - Print SCSI address attributes bus, target, unit as unsigned integer (Eric Farman) - Read SCSI address attributes bus, target, unit as positive integer (Eric Farman) - qemu: simplify json parsing (Eric Blake) - json: make it easier to type-check when getting from object (Eric Blake) - json: fully parse input string (Eric Blake) - test: Switch to reference counting with testDomObjFromDomain (Peter Krempa) - test: Reuse virDomainObjGetOneDef in testDomainGetVcpusFlags (Peter Krempa) - virsh: blockcopy: Report error if the copy job fails (Peter Krempa) - Introduce QEMU_CAPS_ARM_VIRT_PCI (Pavel Fedin) - update sheepdog client] update sheepdog client path (Vasiliy Tolstov) - qemu: cancel drive mirrors when p2p connection breaks (Jiri Denemark) - qemu: Refactor qemuMigrationWaitForCompletion (Jiri Denemark) - qemu: Don't pass redundant job name around (Jiri Denemark) - qemu: Refactor qemuMigrationUpdateJobStatus (Jiri Denemark) - qemu: Refactor qemuDomainGetJob{Info,Stats} (Jiri Denemark) - qemu: Do not poll for spice migration status (Jiri Denemark) - qemu_monitor: Wire up SPICE_MIGRATE_COMPLETED event (Jiri Denemark) - qemu: Use domain condition for asyncAbort (Jiri Denemark) - qemu: Cancel disk mirrors after libvirtd restart (Jiri Denemark) - qemu: Refactor qemuMonitorBlockJobInfo (Jiri Denemark) - qemu: Make qemuMigrationCancelDriveMirror usable without async job (Jiri Denemark) - Pass domain object to private data formatter/parser (Jiri Denemark) - qemu: Don't mess with disk->mirrorState (Jiri Denemark) - qemu: Abort migration early if disk mirror failed (Jiri Denemark) - qemu: Cancel storage migration in parallel (Jiri Denemark) - qemu: Use domain condition for synchronous block jobs (Jiri Denemark) - qemu: Properly report failed migration (Jiri Denemark) - qemu: Introduce qemuBlockJobUpdate (Jiri Denemark) - conf: Introduce per-domain condition variable (Jiri Denemark) - lib: setvcpus: Remove bogus flag check (Peter Krempa) - virsh: selective block device migration (Pavel Boldin) - qemu: migration: selective block device migration (Pavel Boldin) - util: add virTypedParamsAddStringList (Pavel Boldin) - util: virTypedParams{Filter,GetStringList} (Pavel Boldin) - util: multi-value parameters in virTypedParamsAdd* (Pavel Boldin) - util: multi-value virTypedParameter (Pavel Boldin) - virDomainDiskGetSource: Mark passed disk as 'const' (Michal Privoznik) - conf: Move vcpu info parsing code into a separate function (Peter Krempa) - qemu: 'privileged' flag is not really configuration (Peter Krempa) - qemu: Reuse virDomainObjGetDefs in qemuDomainGetMemoryParameters (Peter Krempa) - qemu: Refactor qemuDomainGetMemoryParameters (Peter Krempa) - qemu: Refactor qemuDomainSetNumaParameters (Peter Krempa) - qemu: Simplify qemuDomainSetInterfaceParameters by using virDomainObjGetDefs (Peter Krempa) - qemu: Simplify qemuDomainGetVcpusFlags by using virDomainObjGetOneDef (Peter Krempa) - qemu: Simplify qemuDomainGetEmulatorPinInfo by using virDomainObjGetOneDef (Peter Krempa) - qemu: Simplify qemuDomainGetVcpuPinInfo by using virDomainObjGetOneDef (Peter Krempa) - qemu: Simplify qemuDomainGetNumaParameters by using virDomainObjGetOneDef (Peter Krempa) - qemu: Simplify qemuDomainGetInterfaceParameters by using virDomainObjGetOneDef (Peter Krempa) - conf: Introduce helper to help getting correct def for getter functions (Peter Krempa) - qemu: implement address for isa-serial (James Cowgill) - qemu: Add a check for slot and base dimm address conflicts (Luyao Huang) - daemon: Add the admin service to the admin server only if it was allocated (Peter Krempa) - remove redundant condition (Ján Tomko) - virSysinfo: Introduce SMBIOS type 2 support (Michal Privoznik) - qemu: Report all supported machine types in capabilities (Jiri Denemark) - tests: Sort EXTRA_DIST in the Makefile (Michal Privoznik) - daemon: Don't just include admin RPC (Michal Privoznik) - parallels: substitute parallels with vz spec file and Makefile (Maxim Nestratov) - parallels: rename all parallels files and driver directory to vz (Maxim Nestratov) - parallels: substitute parallels with vz in strings (Maxim Nestratov) - parallels: change parallels prefixes to vz (Maxim Nestratov) - virfile: virDirCreate: Insert blank lines to assure slightly better readability (Erik Skultety) - util: virDirCreate: Child now exits with positive errno-code (Erik Skultety) - lxc: set nosuid+nodev+noexec flags on /proc/sys mount (Eric W. Biederman) - lxc: Rename daemon to dmn (Martin Kletzander) - Revert "rpc: Add virNetServerGetNClients" (Martin Kletzander) - Revert "admin: Add virAdmHello function" (Martin Kletzander) - Change livbirt version to 1.3.0 for the next release (Martin Kletzander) - Example virt-admin (Martin Kletzander) - admin: Add virAdmHello function (Martin Kletzander) - rpc: Add virNetServerGetNClients (Martin Kletzander) - Add support for admin API in libvirt daemon (Martin Kletzander) - Add configuration options for permissions on daemon's admin socket (Martin Kletzander) - Add XML files with admin API specification (Martin Kletzander) - Add libvirt-admin library (Martin Kletzander) - Add admin error domain (Martin Kletzander) - Build client headers for admin protocol (Martin Kletzander) - Add admin protocol (Martin Kletzander) - Teach gendispatch how to handle admin dispatching files (Martin Kletzander) - tests: Adapt virnetservertest to daemon refactor (Martin Kletzander) - Move daemon-related parts of virNetServer to virNetDaemon (Martin Kletzander) - lxc: properly clean up qemu-nbd (Cédric Bosdonnat) - Add virProcessGetPids to get all tasks of a process (Cédric Bosdonnat) - storage: Adjust command arglist for gluster (John Ferlan) - storage: Fix the schema and add tests for cifs pool (John Ferlan) - configure: Remove check for pkcheck_supports_uid (Guido Günther) - tests: Use libvirt properly with initialization and error dispatching (Martin Kletzander) - Generate JSON with mDNS entries only when built --with-avahi (Martin Kletzander) - build: Remove unnecessarily repeated rules for syms -> def (Martin Kletzander) - qemu: monitor: Add memory balloon support for virtio-ccw (Boris Fiuczynski) - getOldStyleBlockDevice: Adjust formatting (Michal Privoznik) - getNewStyleBlockDevice: Adjust formatting (Michal Privoznik) - qemu caps: spell queue (Ján Tomko) - qemu: Do not support 'serial' scsi-block 'lun' devices (John Ferlan) - virCapabilitiesDomainDataLookup: Produce saner error message (Michal Privoznik) - libxl: Add timestamp to the libxl driver log. (Anthony PERARD) - qemu: update netdevs of the same mac addrs correctly (zhang bo) - virsysinfo: s/system/sysdef/ (Michal Privoznik) - cmdNetworkList: Introduce --name, --uuid, --table (Michal Privoznik) - cmdNetworkList: switch to FILTER (Michal Privoznik) - qemuBuildDriveStr: s/virBufferEscapeString/virBufferAsprintf/ (Michal Privoznik) - virQEMUCapsArch: openrisc vs or32 (Michal Privoznik) - virSysinfoDef: Exempt SYSTEM variables (Michal Privoznik) - virSysinfoDef: Exempt BIOS variables (Michal Privoznik) - tests: Distribute virnetserverdata (Michal Privoznik) - schema: use arch list from basictypes for os arch attribute (James Cowgill) - util: add virJSONValueCopy (Martin Kletzander) - qemu: add multiqueue vhost-user support (Maxime Leroy) - qemu: Add capability for vhost-user multiqueue (Martin Kletzander) - conf: Ignore multiqueue with one queue. (Martin Kletzander) - util: Make virProcessGetAffinity more readable and fix coverity warning (Peter Krempa) - apibuild: Generate macro/@string attribute (Jiri Denemark) - rpc: add testing of RPC JSON (de)serialization (Daniel P. Berrange) - rpc: add API for checking IPv4/6 availability (Daniel P. Berrange) - rpc: allow selection of TCP address family (Daniel P. Berrange) - virNumaSetPagePoolSize: Produce friendlier error message (Michal Privoznik) - logical: Fix typo in error message (John Ferlan) - conf: fix domaincommon.rng to accept network name with quotes (Shivaprasad G Bhat) - parallels: treat block devices as disks for containers (Maxim Nestratov) - parallels: report SATA bus type for container block devices disks (Maxim Nestratov) - parallels: process '/' mount point correctly for containers (Maxim Nestratov) - parallels: add isCt parameter to prlsdkGetDiskInfo and prlsdkAddDisk (Maxim Nestratov) - parallels: add block device statistics to driver (Nikolay Shirokovskiy) - qemu: caps: Advertise arm 32-on-64 KVM option (Cole Robinson) - qemu: caps: qemu-system-aarch64 supports armv7l (Cole Robinson) - qemu: command: Support arm 32-on-64 KVM with -cpu aarch64=off (Cole Robinson) - parallels: return only success from PCS event handler (Nikolay Shirokovskiy) - parallels: simplify event types discrimination (Nikolay Shirokovskiy) - utiltest: Use int8_t instead of char. (Michal Privoznik) - Turn qemuMonitorFindBalloonObjectPath into a void function (Ján Tomko) - Do not access the domain definition in qemuMonitorFindBalloonObjectPath (Ján Tomko) - Only call SetMemoryStatsPeriod for virtio memballoon (Ján Tomko) - Check for balloon model in qemuDomainSetMemoryStatsPeriod (Ján Tomko) - Only call qemuMonitorGetMemoryStats for virtio memballoon (Ján Tomko) - Invert the condition in qemuDomainMemoryStats (Ján Tomko) - Add endjob label to qemuDomainMemoryStats (Ján Tomko) - Remove path argument from qemuMonitorJSONFindLinkPath (Ján Tomko) - Introduce qemuMonitorJSONFindLinkPath (Ján Tomko) - Move qemuMonitorFindObjectPath to qemu_monitor_json (Ján Tomko) - rpc: Make virNetServerAddClient function dynamic (Daniel P. Berrange) - storage: Add check for valid FS types in checkPool callback (John Ferlan) - storage: FS backend adjust error message on error path (John Ferlan) - storage: Refactor storage pool type checks (John Ferlan) - qemu: Check for qemu capability when calling virDomainGetBlockIoTune() (Martin Kletzander) - qemu: Refactor qemuDomainSetVcpusFlags by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainGetEmulatorPinInfo by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainPinEmulator by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainGetVcpuPinInfo by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainPinVcpuFlags by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainSetBlkioParameters by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainChgIOThread by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainPinIOThread by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainGetIOThreadInfo by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainGetVcpusFlags by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainSetMemoryStatsPeriod by reusing virDomainObjGetDefs (Peter Krempa) - qemu: Refactor qemuDomainSetMemoryFlags by reusing virDomainObjGetDefs (Peter Krempa) - conf: Add new helpers to resolve virDomainModificationImpact to domain defs (Peter Krempa) - libxl: Don't remove vcpu pin definition in libxlDomainCleanup (Peter Krempa) - Revert "cputune: Support cputune for xend driver" (Peter Krempa) - qemu: libxl: vcpupin: Don't reset pinning when pinning to all pcpus (Peter Krempa) - lib: virDomainPinIOThread: Remove spurious overflow check (Peter Krempa) - conf: Store cpu count as unsigned int (Peter Krempa) - qemu: Refactor qemuDomainGetInfo (Peter Krempa) - qemu: Add helper to update domain balloon size and refactor usage places (Peter Krempa) - qemu: process: Update current balloon state to maximum on vm startup (Peter Krempa) - Always add 'console' matching the 'serial' device (Ján Tomko) - qemu: process: Refactor setup of memory ballooning (Peter Krempa) - qemu: monitor: Make qemuMonitorSetBalloon operate on unsinged long long (Peter Krempa) - util: Add macro to overflow check integer assignments (Peter Krempa) - libxl: Refactor libxlDomainGetVcpuPinInfo (Peter Krempa) - libxl: Reuse virBitmapToData in libxlDomainSetVcpuAffinities (Peter Krempa) - qemu: Refactor qemuDomainHelperGetVcpus by reusing virBitmapToDataBuf (Peter Krempa) - qemu: Reuse virBitmapToDataBuf in qemuDomainGetEmulatorPinInfo (Peter Krempa) - qemu: Use virBitmapToDataBuf in qemuDomainGetVcpuPinInfo (Peter Krempa) - util: bitmap: Add virBitmapToDataBuf that does not allocate the buffer (Peter Krempa) - conf: Move pinning information definition closer to the usage place (Peter Krempa) - conf: Refactor emulatorpin handling (Peter Krempa) - parallels: set virtType depending on driver name (Maxim Nestratov) - parallels: recommend to connect to vz:///system when connection fails (Maxim Nestratov) - parallels: increment the number of connection drivers (Maxim Nestratov) - parallels: add a new vz connection driver and hypervisor structures (Maxim Nestratov) - parallels: accept vz as a driver uri and name (Maxim Nestratov) - parallels: add new guest capabilities assigned to vz driver (Maxim Nestratov) - parallels: use newly introduced VIR_DOMAIN_VIRT_VZ (Maxim Nestratov) - parallels: introduce vz driver constant and string (Maxim Nestratov) - audit: Audit number of iothreads at domain startup (Luyao Huang) - util: report all address range errors in virSocketAddrGetRange() (Laine Stump) - network: cleanup range loop in networkDnsmasqConfContents (Laine Stump) - network: validate DHCP ranges are completely within defined network (Laine Stump) - Simplify virNodeCountThreadSiblings (Ján Tomko) - Report errors in virNodeCountThreadSiblings (Ján Tomko) - virsh: Move error messages inside vshCommandOpt*() functions (Andrea Bolognani) - virsh: Pass vshControl to all vshCommandOpt*() calls (Andrea Bolognani) - virsh: Make vshCommandOptScaledInt() use vshCommandOpt() (Andrea Bolognani) - virsh: Improve vshCommandOptTimeoutToMs() (Andrea Bolognani) - virsh: Use standard error messages in vshCommandOptTimeoutToMs() (Andrea Bolognani) - tests: Add a bunch of new tests to virsh-optparse (Andrea Bolognani) - maint: update to latest gnulib (Eric Blake) - spec: fixes for recently introduced libxl conf files (Jim Fehlig) - virsh: make negative values with vol-resize more convenient (Ján Tomko) - qemu: Automatically add <panic> element for pSeries guests. (Andrea Bolognani) - qemu: Allow panic device for pSeries guests (Andrea Bolognani) - qemu: Improve error message for missing QEMU_CAPS_DEVICE_PANIC. (Andrea Bolognani) - Post-release version bump to 1.2.17 (Daniel P. Berrange) Cleanups: - qemu: monitor: Fix indentation in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa) - vz_utils: Reformat (Michal Privoznik) - vz_storage: Reformat (Michal Privoznik) - vz_sdk: Reformat (Michal Privoznik) - vz_network: Reformat (Michal Privoznik) - vz_driver: Reformat (Michal Privoznik) - test: Drop unused attribute @path from testDriver struct (Peter Krempa) - test: Drop useless forward declaration (Peter Krempa) - vz: fix syntax-check errors (Dmitry Guryanov) - virQEMUCapsComputeCmdFlags: Indent correctly (Michal Privoznik) - qemuMigrationBeginPhase: Fix function header indentation (Michal Privoznik) - qemu: Fix double space in error message in qemuDomainGetVcpusFlags (Peter Krempa) - libvirt.spec: Don't expect virt-admin in libvirt-admin yet (Michal Privoznik) - netserver: Remove duplicate forward declaration (Martin Kletzander) - Revert "Example virt-admin" (Martin Kletzander) - apibuild: Fix indentation (Jiri Denemark) - parallels: fix formatting errors in parallels driver (Dmitry Guryanov) - storage: Remove extraneous @conn from function comments (John Ferlan) - remote: fix odd comma operator (Eric Blake) - maint: remove incorrect apostrophes from 'its' (Ján Tomko) Thanks everybody for the help bringing those releases, be it with ideas bug report, patches, doc, reviews, etc... Enjoy ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] ANNOUNCE: libvirt-sandbox "Dashti Margo" release 0.6.0
by Daniel P. Berrange 01 Jul '15

01 Jul '15

I pleased to announce the a new public release of libvirt-sandbox, version 0.6.0, is now available for download ftp://libvirt.org/libvirt/sandbox/ The packages are GPG signed with Key fingerprint: DAF3 A6FD B26B 6291 2D0E 8E3F BE86 EBB4 1510 4FDF (4096R) The libvirt-sandbox package provides an API layer on top of libvirt-gobject which facilitates the cration of application sandboxes using virtualization technology. An application sandbox is a virtual machine or container that runs a single application binary, directly from the host OS filesystem. In other words there is no separate guest operating system install to build or manager. At this point in time libvirt-sandbox can create sandboxes using either LXC or KVM, and should in theory be extendable to any libvirt driver. This release contains a mixture of new features and bug fixes - API/ABI in-compatible change, soname increased - Prevent use of virt-sandbox-service as non-root upfront - Fix misc memory leaks - Block SIGHUP from the dhclient binary to prevent accidental death if the controlling terminal is closed & reopened - Add support for re-creating libvirt XML from sandbox config to facilitate upgrades - Switch to standard gobject introspection autoconf macros - Add ability to set filters on network interfaces - Search /usr/lib instead of /lib for systemd unit files, as the former is the canonical location even when / and /usr are merged - Only set SELinux labels on hosts that support SELinux - Explicitly link to selinux, instead of relying on indirect linkage - Update compiler warning flags - Fix misc docs comments - Don't assume use of SELinux in virt-sandbox-service - Fix path checks for SUSUE in virt-sandbox-service - Add support for AppArmour profiles - Mount /var after other FS to ensure host image is available - Ensure state/config dirs can be accessed when QEMU is running non-root for qemu:///system - Fix mounting of host images in QEMU sandboxes - Mount images as ext4 instead of ext3 - Allow use of non-raw disk images as filesystem mounts - Check if required static libs are available at configure time to prevent silent fallback to shared linking - Require libvirt-glib >= 0.2.1 - Add support for loading lzma and gzip compressed kmods - Check for support libvirt URIs when starting guests to ensure clear error message upfront - Add LIBVIRT_SANDBOX_INIT_DEBUG env variable to allow debugging of kernel boot messages and sandbox init process setup - Add support for exposing block devices to sandboxes with a predictable name under /dev/disk/by-tag/TAGNAME - Use devtmpfs instead of tmpfs for auto-populating /dev in QEMU sandboxes - Allow setup of sandbox with custom root filesystem instead of inheriting from host's root. - Allow execution of apps from non-matched ld-linux.so / libc.so, eg executing F19 binaries on F22 host - Use passthrough mode for all QEMU filesystems Thanks to everyone who contributed to this release Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0