- Announce - libvirt List Archives

[Libvirt-announce] Release of libvirt-1.2.7
by Daniel Veillard 03 Aug '14

03 Aug '14

As planned it's out, tagged in git, source tarball and rpms are available as usual from: ftp://libvirt.org/libvirt/ This is a rather large release for the month of July, close to 300 commits, mostly around incremental improvements and bug fixes. There is a new API however: Features: - Introduce virConnectGetDomainCapabilities (Michal Privoznik) Documentation: - bhyve: document recent changes (Roman Bogorodskiy) - fix an incorrect example for memoryBacking (Chen Hanxiao) - libvirt-guests: fix some typos in a comment (Martin Kletzander) - libvirt: Fix 'quest' typo in comment (Li Yang) - Point to list of valid pool target volume formats (John Ferlan) - Documented VIR_DOMAIN_FEATURE_CAPABILITIES use of virDomainCapabilitesPolicy (Cédric Bosdonnat) - Explicitly specify how to override spice channel mode (Peter Krempa) - add domain to address of hostdev pci (Hu Tao) - domain: Clarify that disk type 'lun' works with iSCSI too (Peter Krempa) - esx: Fix a comment about VSphere versions (Geoff Hickey) - virsh: Document bandwidth maximum more clearly (John Ferlan) - mention more about older capability feature bits (Eric Blake) - Be more specific about semantics of _REUSE_EXT flag (Peter Krempa) - Document that snapshot name of block-backed disk isn't autogenerated (Peter Krempa) - virsh: document the possibility of accepting integers for numatune mode (Martin Kletzander) - Document the need to free vir*Ptr objects per-function (Ján Tomko) - Document the need to free vir*Ptr objects (Ján Tomko) - LXC: fix an improper comments for lxcDomainDestroyFlags (Chen Hanxiao) - formatdomain.html fixes (Michele Paolino) - Fix broken link in the HACKING page (Michele Paolino) - formatdomain: Fix issues found describing auth (John Ferlan) - LXC: update comments of lxcDomainCreateXMLWithFiles() and lxcDomainCreateXML() (Yue wenyuan) Portability: - build: fix build on cygwin (Eric Blake) - domtop: Fix build on mingw (Michal Privoznik) - build: fix build without numactl (Eric Blake) - Fix build on non-Linux platforms (Roman Bogorodskiy) - check for cfg->spiceTLS earlier in qemuProcessSPICEAllocatePorts (Ján Tomko) - build: package .pc files for mingw64 (Eric Blake) - build: fix gnulib build for mingw (Eric Blake) - util: cgroup: Fix build on non-cgroup platforms (Peter Krempa) - Don't require iptables-ipv6 on >= F17 and RHEL >= 7 (Ján Tomko) - tools/wireshark: fix rpm build (Pavel Hrdina) - tests: Avoid double linking some libraries (Michal Privoznik) Bug fixes: - network: always set disable_ipv6, even when it should be 0 (Laine Stump) - Fix a crash when cloning a volume with no backing store (Ján Tomko) - qemu: error out if PCI passthrough type is not supported (Hu Tao) - storage: create: Create files with correct mode (Peter Krempa) - nodedev: fix a uninitialized variable build failure (Chen Hanxiao) - nodedev: fix pci express memory leak (Eric Blake) - qemu: sound: Fix uninitialized model string (Peter Krempa) - qemu: Fix starting of VMs with empty CDROM drives (Peter Krempa) - util: virTimeFieldsThenRaw never returns negative (James) - qemu: cgroup: Don't use NULL path on default backed RNGs (Peter Krempa) - qemuConnectGetDomainCapabilities: Report error on unknown arch (Michal Privoznik) - remove range checking for blkiotune weight (Martin Kletzander) - qemuConnectGetDomainCapabilities: Use wiser defaults (Michal Privoznik) - leaseshelper: avoid mem leak after storing lease entries (Nehal J Wani) - conf: avoid memory leaks while parsing seclabel (Eric Blake) - nwfilter: plug memory leak with firewall (Eric Blake) - metadata: track title edits across libvirtd restart (Eric Blake) - Fix build after 47e5b5ae3262f140955abd57bbb13337c65a3497 (Peter Krempa) - qemu: snapshot: Forbid taking/reverting snapshots in PMSUSPENDED state (Peter Krempa) - qemu: snapshot: Forbid taking snapshot in invalid state (Peter Krempa) - schema: pool: netfs: Don't enforce slash in glusterfs pool source (Peter Krempa) - examples: domtop: Avoid leaking memory (Peter Krempa) - examples: domtop: Fix uninitialized variable use (Peter Krempa) - qemu: snapshot: Forbid snapshots of iSCSI passthrough devices (Peter Krempa) - storage: Disallow vol_wipe for sparse logical volumes (John Ferlan) - virsh vol-upload/download disallow negative offset (John Ferlan) - storage: Split out volume wiping as separate backend function (Peter Krempa) - esx: Fix a bug in the XML code for storage pools (Geoff Hickey) - blockjob: wait for pivot to complete (Eric Blake) - Fix const correctness (Michal Privoznik) - Fix assignment of comparison against zero (Ján Tomko) - Fix error on fs pool build failure (Ján Tomko) - spec: fix invalid syntax (Eric Blake) - libxl: fix return value error Attach|DetachDeviceFlags (Chunyan Liu) - qemu: blockcopy: Initialize correct source structure (Peter Krempa) - GetBlockInfo: Use the correct path to qemuOpenFile (John Ferlan) - virseclabel: Resolve Coverity FORWARD_NULL issue (John Ferlan) - conf: Always format seclabel's model (Michal Privoznik) - conf: Fix possible NULL dereference in virStorageVolTargetDefFormat (Matthias Bolte) - conf: Don't allow multiple seclabels for same model (Michal Privoznik) - qemu: don't error out when cgroups don't exist (Martin Kletzander) - util: storage: Fix build after 25924dec0f9329d429aadae14e273602307e2214 (Peter Krempa) - qemu: fix domxml-to-native failing when spice_tls is not enabled (Jincheng Miao) - virEventPollDispatchHandles: Honour array boundaries (Michal Privoznik) - Allow updating names in DHCP hosts by matching IPs. (Ján Tomko) - Actually fix the spec file (Ján Tomko) - libxl: fix crash in migrate confirm for transient domains (Jim Fehlig) - libxl: acquire job though begin phase only (Jim Fehlig) - libxl: remove domain when migration prepare fails (Jim Fehlig) - qemu: raise an eror when using aio=native without cache=none (Giuseppe Scrivano) - Do not allow changing the UUID of a nwfilter (Hu Jianwei) - LXC: Allow setting max mem lower than current mem (Ján Tomko) - virsh: domain: Use inactive XML when unplugging interface with --config (Peter Krempa) - Free the return value of virFileFindResource (Ján Tomko) - qemu_domain: fix startup policy for disks (Pavel Hrdina) - Fix segfault when starting a domain with no cpu definition (Ján Tomko) - qemu: raise an error when trying to use readonly ide disks (Giuseppe Scrivano) Improvements: - blockcommit: turn on active commit (Eric Blake) - blockcommit: track job type in xml (Eric Blake) - Domain config: write <features/> if some capabilities are set. (Cédric Bosdonnat) - blockjob: properly track blockcopy xml changes on disk (Eric Blake) - blockcopy: add more XML for state tracking (Eric Blake) - qemu: Implement ./hugepages/page/[@size, @unit, @nodeset] (Michal Privoznik) - domain: Introduce ./hugepages/page/[@size, @unit, @nodeset] (Michal Privoznik) - virbitmap: Introduce virBitmapOverlaps (Michal Privoznik) - qemu: Utilize virFileFindHugeTLBFS (Michal Privoznik) - Introduce virFileFindHugeTLBFS (Michal Privoznik) - schema: bhyve and nmdm updates (Roman Bogorodskiy) - nodedev: move pci express types to virpci.h (Eric Blake) - nodedev: let compiler help us on switches (Eric Blake) - qemu: sound: Handle all possible sound cards in switch statement (Peter Krempa) - conf: RNG: Always fill in default random source path for default backend (Peter Krempa) - spec: arm and aarch64 have kvm support with F20+ (Cole Robinson) - spec: Use power64 macro (Cole Robinson) - test: qemu: Add tests for multiple virtio-rng devices (Peter Krempa) - virtio-rng: allow multiple RNG devices (Peter Krempa) - bhyve: cdrom support (Roman Bogorodskiy) - virsh: add option for selecting domdisplay type (Martin Kletzander) - virsh: add error message when no graphical display is found (Martin Kletzander) - hostdev: Introduce virDomainHostdevSubsysSCSIiSCSI (John Ferlan) - Add virConnectPtr for qemuBuildSCSIHostdevDrvStr (John Ferlan) - hostdev: Introduce virDomainHostdevSubsysSCSIHost (John Ferlan) - hostdev: Introduce virDomainHostdevSubsysSCSI (John Ferlan) - hostdev: Introduce virDomainHostdevSubsysPCI (John Ferlan) - hostdev: Introduce virDomainHostdevSubsysUSB (John Ferlan) - qemu: snapshot: Use storage driver to pre-create snapshot file (Peter Krempa) - storage: Implement virStorageFileCreate for local and gluster files (Peter Krempa) - qemu: Implement DAC driver chown callback to co-operate with storage drv (Peter Krempa) - security: DAC: Plumb usage of chown callback (Peter Krempa) - security: DAC: Introduce callback to perform image chown (Peter Krempa) - security: DAC: Remove superfluous link resolution (Peter Krempa) - storage: Add witness for checking storage volume use in security driver (Peter Krempa) - storage: Implement storage driver helper to chown disk images (Peter Krempa) - numatune: finish the split from domain_conf and remove all dependencies (Martin Kletzander) - maint: simplify some syntax check exemptions (Eric Blake) - spec: Enable sanlock on qemu_kvm_arches for RHEL (Jiri Denemark) - Added myself in AUTHORS.in (Cédric Bosdonnat) - Introduce virTristateSwitch enum (Ján Tomko) - Introduce virTristateBool enum type (Ján Tomko) - LXC: show used memory as 0 when domain is not active (Chen Hanxiao) - lxc domain from xml: convert lxc.cap.drop (Cédric Bosdonnat) - lxc: allow to keep or drop capabilities (Cédric Bosdonnat) - LXC: create a bind mount for sysfs when enable userns but disable netns (Chen Hanxiao) - storage: logical: drop useless if (Roman Bogorodskiy) - getAdapterName: Lookup stable scsi_host (John Ferlan) - scsi_host: Introduce virFindSCSIHostByPCI (John Ferlan) - Add unique_id to nodedev output (John Ferlan) - virutil: Introduce virReadSCSIUniqueId (John Ferlan) - scsi_backend: Use existing LINUX_SYSFS_SCSI_HOST_PREFIX definition (John Ferlan) - storage: Introduce parentaddr into virStoragePoolSourceAdapter (Osier Yang) - virStoragePoolSourceAdapter: Refine the SCSI_HOST adapter name (Osier Yang) - getAdapterName: check for SCSI_HOST (John Ferlan) - node_device: HAL: Ignore return value of virStrToLong_ui (Peter Krempa) - util: Check return value from virStrToLong* functions (Peter Krempa) - qemu: snapshot: Reject revertion from clearly bad states (Peter Krempa) - qemu: snapshot: Convert if-else switch to switch statement (Peter Krempa) - bhyve: reconnect to domains after libvirtd restart (Roman Bogorodskiy) - examples: Introduce domtop (Michal Privoznik) - Kill last strto{l,ll,d} scouts (Michal Privoznik) - lxc conf2xml: convert lxc.network.name for veth networks (Cédric Bosdonnat) - lxc network configuration allows setting target container NIC name (Cédric Bosdonnat) - spec: Consolidate with_qemu* definitions (Jiri Denemark) - storage: Convert 'building' into a bool (John Ferlan) - Fix build by dropping redefined typedefs (Roman Bogorodskiy) - test: metadata: Improve test coverage (Peter Krempa) - Log an error when we fail to set the COW attribute (Ján Tomko) - storage: wipe: Move helper code into storage backend (Peter Krempa) - schema: put interleave at correct level (Eric Blake) - schema: add interleave inside numatune (Martin Kletzander) - qemu: leave restricting cpuset.mems after initialization (Martin Kletzander) - qemu: split out cpuset.mems setting (Martin Kletzander) - qemu: pass numa node binding preferences to qemu (Martin Kletzander) - qemu: enable disjoint numa cpu ranges (Martin Kletzander) - qemu: newer -numa parameter capability probing (Martin Kletzander) - qemu: memory-backend-ram capability probing (Martin Kletzander) - qemu: allow qmp probing for cmdline options without params (Martin Kletzander) - numatune: add support for per-node memory bindings in private APIs (Martin Kletzander) - conf, schema: add support for memnode elements (Martin Kletzander) - numatune: Encapsulate numatune configuration in order to unify results (Martin Kletzander) - numatune: unify numatune struct and enum names (Martin Kletzander) - numatune: create new module for numatune (Martin Kletzander) - conf, schema: add 'id' field for cells (Martin Kletzander) - conf: purely a code movement (Martin Kletzander) - qemu: remove useless error check (Martin Kletzander) - qemu: purely a code movement (Martin Kletzander) - support for QEMU vhost-user (Michele Paolino) - util: forbid freeing const pointers (Eric Blake) - add nocow test case (Chunyan Liu) - storagevol: add nocow to vol xml (Chunyan Liu) - storage: fs: Don't fail volume update if backing store isn't accessible (Peter Krempa) - storage: fs: Properly parse backing store info (Peter Krempa) - storage: fs: Process backing store data in virStorageBackendProbeTarget (Peter Krempa) - storage: backend: fs: Touch up coding style (Peter Krempa) - storage: Track backing store of a volume in the target struct (Peter Krempa) - storage: backend: Fix formatting of function arguments (Peter Krempa) - Rework lxc apparmor profile (Cédric Bosdonnat) - Implement interface stats for BSD (Roman Bogorodskiy) - util: virstatslinux: make more generic (Roman Bogorodskiy) - libxl: support hotplug of <interface> (Chunyan Liu) - libxl: add HOSTDEV type in libxlDomainDetachDeviceConfig (Chunyan Liu) - spec: Update polkit dependencies for CVE-2013-4311 (Jiri Denemark) - capabilities: use bool instead of int (Eric Blake) - openvswitch: Delete port if it exists while adding a new one (Chunhe Li) - virSecurityLabelDefParseXML: Rework (Michal Privoznik) - aa-helper: adjust previous patch (Cédric Bosdonnat) - Don't output libvirt-UUID.files for LXC apparmor profiles (Cédric Bosdonnat) - libxl: Correct cast to virDomainDiskDiscard enum. (Ian Campbell) - LXC: add support for --config in setmem command (Chen Hanxiao) - virSecurityDeviceLabelDef: substitute 'norelabel' with 'relabel' (Michal Privoznik) - virSecurityLabelDef: substitute 'norelabel' with 'relabel' (Michal Privoznik) - storage: Split out volume upload/download as separate backend function (Peter Krempa) - libxl: add discard support to libxl_device_disk (Olaf Hering) - conf: Improve metadata type verification (Peter Krempa) - qemu: snapshot: Refactor image labelling of new snapshot files (Peter Krempa) - qemu: Refactor qemuDomainPrepareDiskChainElement (Peter Krempa) - qemu: snapshot: Improve approach to deal with snapshot metadata (Peter Krempa) - qemu: block: Properly track disk source while pivoting to new image (Peter Krempa) - qemu: blockcopy: Use the mirror disk source to label the files (Peter Krempa) - util: storage: Return complete parent info from virStorageFileChainLookup (Peter Krempa) - util: storage: Make virStorageFileChainLookup more network storage aware (Peter Krempa) - security: AppArmor: Implement per-image seclabel set (Peter Krempa) - security: AppArmor: Implement per-image seclabel restore (Peter Krempa) - security: DAC: Implement per-image seclabel set (Peter Krempa) - security: DAC: Implement per-image seclabel restore (Peter Krempa) - security: selinux: Implement per-image seclabel set (Peter Krempa) - security: selinux: Implement per-image seclabel restore (Peter Krempa) - security: Introduce APIs to label single images (Peter Krempa) - locking: Add APIs to lock individual image files (Peter Krempa) - qemu: cgroup: Setup only the top level disk image for read-write access (Peter Krempa) - qemu: cgroup: Add functions to set cgroup image stuff on individual imgs (Peter Krempa) - util: XML: Avoid forward function declaration (Peter Krempa) - libxl: rename goto label (Jim Fehlig) - maint: update to latest gnulib (Eric Blake) - properly indent virSecurityLabelDefsParseXML() parameters (Martin Kletzander) - Fix the indentation in libvirt.spec.in (Ján Tomko) - util: cgroup: Add helper to convert device mode to string (Peter Krempa) - util: storage: Copy parent's disk metadata to backing chain elements (Peter Krempa) - util: storage: Add function to transfer config parts to new chain element (Peter Krempa) - util: storagefile: Add deep copy for struct virStorageSource (Peter Krempa) - storage: Move readonly and shared flags to disk source from disk def (Peter Krempa) - conf: Don't output seclabels for backingStore elements (Peter Krempa) - storage: file: Tolerate NULL src when uninitializing the backend (Peter Krempa) - qemu: Add helper to initialize storage file backend with correct uid/gid (Peter Krempa) - qemu: Don't propagate whole disk definition into qemuDomainGetImageIds (Peter Krempa) - qemu: Add support for networked disks for block pull/block rebase (Peter Krempa) - qemu: Add support for networked disks for block commit (Peter Krempa) - lib: Introduce flag VIR_DOMAIN_BLOCK_REBASE_RELATIVE (Peter Krempa) - lib: Introduce flag VIR_DOMAIN_BLOCK_COMMIT_RELATIVE (Peter Krempa) - qemu: refactor qemuDomainGetBlockInfo to work with remote storage (Peter Krempa) - storage: gluster: Optimize header reader functions (Peter Krempa) - util: storage: Allow specifying format for virStorageFileGetMetadataFromBuf (Peter Krempa) - util: storage: Inline use of virStorageFileGetMetadataFromFDInternal (Peter Krempa) - audit: Audit smartcard devices (Peter Krempa) - audit: Add auditing for serial/parallel/channel/console character devs (Peter Krempa) - virt-lxc-convert: make free return values in bytes (Cédric Bosdonnat) - qemu: dump: Report better error when dumping VM with passthrough devices (Peter Krempa) - LXC: remove duplicate controller check code (Chen Hanxiao) - wireshark: Honor API change coming with 1.12 release (Michal Privoznik) - wireshark: Include more of libvirt internals (Michal Privoznik) - qemu: monitor: Add support for backing name specification for block-stream (Peter Krempa) - qemu: monitor: Add argument for specifying backing name for block commit (Peter Krempa) - qemu: caps: Add capability for change-backing-file command (Peter Krempa) - audit: disk: Refactor disk auditing to avoid auditing remote storage (Peter Krempa) - conf: audit: Split out common steps to audit domain devices (Peter Krempa) - conf: audit: rng: Reorder new and old RNG device definitions (Peter Krempa) - util: storage: Add helper to determine whether storage is local (Peter Krempa) - Utilize virDomainDiskAuth for storage pools (John Ferlan) - Utilize virDomainDiskAuth for domain disk (John Ferlan) - qemuargv2xmltest: Resurrect RBD and iSCSI auth (John Ferlan) - virstorage: Introduce virStorageAuthDef (John Ferlan) - blockjob: turn on qemu capability bit for active commit (Eric Blake) - blockjob: allow omitted arguments to QMP block-commit (Eric Blake) - qemu: Implement virConnectGetDomainCapabilities (Michal Privoznik) - qemu_capabilities: Introduce virQEMUCapsGetDefaultMachine (Michal Privoznik) - qemu_capabilities: Introduce virQEMUCapsIsMachineSupported (Michal Privoznik) - qemu_capabilities: Introduce virQEMUCapsCacheLookupByArch (Michal Privoznik) - tests: Move qemu caps XML parsing into shared unit (Michal Privoznik) - virsh: expose virConnectGetDomainCapabilities (Michal Privoznik) - Introduce domain_capabilities (Michal Privoznik) - Remove double OOM error reporting (Ján Tomko) - Remove double OOM error reporting from JSON monitor (Ján Tomko) - Add OOM error reporting to a few fucntions (Ján Tomko) - Set errno on OOM in lxcProcReadMeminfo (Ján Tomko) - Use virBufferCheckError everywhere we report OOM error (Ján Tomko) - Report errors in virCapabilitiesFormatXML (Ján Tomko) - Introduce virBufferCheckError (Ján Tomko) - Use virStringReplace instead of openvz_replace (Ján Tomko) - Remove useless condition in networkRadvdConfContents (Ján Tomko) - usb: Remove redundant comment (Ján Tomko) - More indentation fixes (Ján Tomko) - Fix indentation in bridge driver (Ján Tomko) - virsh: Allow attach-disk to specify disk target bus (Yanbing Du) - qemu: Add cmd_per_lun, max_sectors to virtio-scsi (Mike Perez) - Add invariant TSC cpu flag (Ján Tomko) - util: unify extra asterisk in viralloc.h (Martin Kletzander) Cleanups: - tests: Remove stale scsihostdata dir (Michal Privoznik) - xenapiConnectGetCapabilities: Remove unused 'cleanup' label (Michal Privoznik) Thanks everybody for the help with this release, be it with ideas, bug reports, patch and reviews or translations ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.7
by Daniel Veillard 31 Jul '14

31 Jul '14

It's that time for the month ! As planned I have tagged a first release candidate in git and sent tarbal and rpms to the usual place: ftp://libvirt.org/libvirt/ Seems to work for my limited testing but please give it a try, and let's fix the reported bugs ! I will try to put a release candidate 2 snapshot out on Wednesday and make the release on Friday, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-1.2.6
by Daniel Veillard 02 Jul '14

02 Jul '14

As planned I have tagged the release in git and pushed the tarball as well as signed rpms to the usual place: ftp://libvirt.org/libvirt/ I also tagged 1.2.6 for the libvirt tree and pushed the associated release to its own tree: ftp://libvirt.org/libvirt/python/ Looks like a well balanced release, some new user visible features, a number of bugs fixes, lot of improvement accross the whole code, and a bit less than 300 patches in. Features: - libxl: add migration support and fixes (Jim Fehlig) - various improvements and fixes for NUMA (Michal Privoznik) Documentation: - security: manager: Document behavior of disk label manipulation funcs (Peter Krempa) - fix some typos in formatdomain.html (Jincheng Miao) - virsh: man: Correctly spell QEMU (Peter Krempa) - virsh: man: Fix examples and docs for virsh version (Peter Krempa) - Added example script on how to convert LXC container config (Cédric Bosdonnat) - blockjob: document recent job addition (Eric Blake) - virsh: Add details about specified migration host (Chen Fan) - blockcommit: document semantics of committing active layer (Eric Blake) - fix a typo in hacking.html.in (Wangrui (K)) - formatcaps: Rework and add stubs to document (Michal Privoznik) Portability: - build: link libvirt_conf with libxml (Martin Kletzander) - vbox: fix linker error (Jim Fehlig) - libxl: don't break the build on Xen>=4.5 because of libxl_vcpu_setaffinity() (Dario Faggioli) - Add PKG_CONFIG_PATH to run.in script. (Daniel P. Berrange) - Change 'interface' to 'iface' in virNetworkDHCPLease (Daniel P. Berrange) - Fix shadowed variable with older gcc (Ján Tomko) - Add pkg-config files to allow deps to build against source tree (Daniel P. Berrange) - Add pkg-config files for libvirt-qemu & libvirt-lxc (Daniel P. Berrange) - blockjob: avoid compiler uncertainty in info sizing (Eric Blake) - build: prefer -fstack-protector-strong to -all (Ján Tomko) - build: remove ssp-buffer-size (Ján Tomko) - build: remove duplicit warning suppression (Ján Tomko) - virnetdev: Use ifname in virNetDevGetLinkInfo (Michal Privoznik) - Fix virbitmaptest on 32-bit (Ján Tomko) - translations: Don't leave default template fields in .po files (Martin Kletzander) - tests: Build virstoragetest only when storage driver is compiled too (Peter Krempa) - Fix build on freebsd (Pavel Hrdina) Bug Fixes: - qemu: copy: Accept 'format' parameter when copying to a non-existing img (Peter Krempa) - storage: gluster: Fix header reader function (Peter Krempa) - conf: storage: Add volume feature formatter for gluster pools (Peter Krempa) - vboxsnapshotxmltest: Don't write to a file in abs_srcdir (Michal Privoznik) - securityselinuxlabeltest: Don't create dummy file in the srcdir (Michal Privoznik) - Report one error less when getting net dev speed (Ján Tomko) - Only detect PCI Express devices as root in udev nodedev driver (Ján Tomko) - libxl: add PV console if not explicitly specified (Jim Fehlig) - qemu: snapshot: Save persistent domain config when taking external snapshot (Peter Krempa) - bhyve: fix build by fixing typo in variable name (Roman Bogorodskiy) - docs: publish correct enum values (Eric Blake) - qemu: fix guestfwd chardev option back how it was (Martin Kletzander) - Fix typo s/SASL_CONF_DIR/SASL_CONF_PATH/ in QEMU VNC code (Daniel P. Berrange) - qemu: blockcopy: Don't remove existing disk mirror info (Peter Krempa) - bridge: leases: Fix potential crash caused by use after free (Peter Krempa) - Free DHCP leases file in networkGetDHCPLeasesHelper (Ján Tomko) - Rework remoteSerializeDHCPLease (Ján Tomko) - Free file header in virStorageFileGetMetadataRecurse (Ján Tomko) - graphics: remember graphics not auto allocated ports (Giuseppe Scrivano) - LXC: trivially support flag VIR_DRV_FEATURE_TYPED_PARAM_STRING (Chen Hanxiao) - cmdFreepages: initialize @tmp (Michal Privoznik) - Fix closedir usage in virNumaGetPages (Roman Bogorodskiy) - Don't include @LIBS@ in libvirt.pc.in file (Daniel P. Berrange) - virnuma: Actually build huge page code (Michal Privoznik) - Do not call closedir with NULL argument (Ján Tomko) - Fix invalid write in virNumaGetDistances (Ján Tomko) - Properly check the return value of CCWAddressAsString (Ján Tomko) - virsh: fix broken code in freepages (Eric Blake) - Fix xmconfigtest (Jim Fehlig) - vbox_snapshot_conf: fix wrong use of 'xmlSaveFormatFileEnc' (Pavel Hrdina) - tests: fix vbox snapshot xmls (Pavel Hrdina) - vbox: fix a segfault when taking a snapshot (Yohan BELLEGUIC) - vbox: snapshot: Avoid memleaks in functions dealing with disk arrays (Peter Krempa) - vbox: snapshot: Avoid memleak in virVBoxSnapshotConfAllChildren (Peter Krempa) - uuid: Fix coverity warning of unchecked return value (Peter Krempa) - network: bridge: Avoid freeing uninitialized pointer on cleanup path (Peter Krempa) - net: leaseshelper: Refactor copying of old entries to avoid double free (Peter Krempa) - net: leaseshelper: Ignore corrupted lease file and rewrite it (Peter Krempa) - net: leaseshelper: Don't crash if DNSMASQ doesn't provide lease expiry (Peter Krempa) - blockjob: don't remove older-style mirror XML (Eric Blake) - blockcommit: require base below top (Eric Blake) - leaseshelper: fix another crash (Pavel Hrdina) - bhyve: do not cleanup unallocated networks on fail (Roman Bogorodskiy) - bhyve: fix crash in bhyveBuildNetArgStr (Roman Bogorodskiy) - storage: report VIR_ERR_NO_STORAGE_VOL when the file doesn't exist (Giuseppe Scrivano) - blockcommit: fix regression with explicit top argument (Eric Blake) - virsh: forbid negative vcpu argument to vcpupin (Jincheng Miao) - Fix crash when saving a domain with type none dac label (Ján Tomko) - vbox_snapshot_conf: Resolve Coverity warnings (John Ferlan) - vbox_temp: Resolve Coverity warnings (John Ferlan) - libxl: Resolve Coverity warnings (John Ferlan) - leaseshelper: fix crash (Pavel Hrdina) - qemu: Properly label FDs when restoring domain with static label (Shivaprasad G Bhat) - nodeinfo: avoid uninitialized variable on error (Eric Blake) - storage: fix memory leak with encrypted images (Eric Blake) - vbox: fix compilation error (Roman Bogorodskiy) - SELinux: don't fail silently when no label is present (Ján Tomko) - parallels: Avoid possible leak of "cpu" from parallelsBuildCapabilities (Peter Krempa) - Fix storage format probing (Ján Tomko) - network: bridge: Avoid memory leak from networkBuildDhcpDaemonCommandLine (Peter Krempa) - qemu: monitor: Fix type of holdtime argument in qemuMonitorJSONSendKey (Peter Krempa) - libxl: Avoid possible use of uninitialized mem in libxlDomainStart (Daniel P. Berrange) - qemu: Remove character device backend only after frontend is gone (Jiri Denemark) - qemu: Remove disk backend only after frontend is gone (Jiri Denemark) - qemu: Remove interface backend only after frontend is gone (Jiri Denemark) - Don't use AI_ADDRCONFIG when binding to wildcard addresses (Ján Tomko) - qemu: Unref cfg when detaching hostdev interface (Jiri Denemark) - virsh: Check whether found volume is member of the specified storage pool (Peter Krempa) Improvements: - Introduce virFileReadAllQuiet (Ján Tomko) - Track privileged state in udev nodedev driver (Ján Tomko) - build: fix 'make syntax-check' after commit c6cf5df3 (Jim Fehlig) - LXC: throw an error if we failed to get Idmap elements (Chen Hanxiao) - cpu: Add new Broadwell CPU model (Jiri Denemark) - net: merge virNetworkGetDHCPLeases and virNetworkGetDHCPLeasesForMAC (Peter Krempa) - Add test for type none model dac seclabel (Ján Tomko) - test: add user_xattr check for securityselinuxlabeltest (Jincheng Miao) - libxl: detect support for save and restore (Jim Fehlig) - security: nop: Avoid very long lines (Peter Krempa) - security: Fix header formatting of a few functions (Peter Krempa) - security: manager: Unify function header format (Peter Krempa) - security: manager: Avoid forward decl of virSecurityManagerDispose (Peter Krempa) - security: Rename virSecurityManagerRestoreImageLabel to *Disk* (Peter Krempa) - util: s/virStorageSourceClearBackingStore/virStorageSourceBackingStoreClear (Peter Krempa) - Fix a typo in a localized string (Daniel Veillard) - virConnectCompareCPU: Introduce FAIL_INCOMPATIBLE flag (Jiri Denemark) - cpuCompare*: Add support for reporting failure on incompatible CPUs (Jiri Denemark) - cpu: Cleanup coding style in generic CPU driver (Jiri Denemark) - virsh: Remove bogus stat on log file (Jiri Denemark) - enhance hostdev mode 'capabilities' process (Jincheng Miao) - storage: Don't store parent directory of an image explicitly (Peter Krempa) - storage: Don't canonicalize paths unnecessarily (Peter Krempa) - tests: virstoragetest: Remove unneeded relative test plumbing (Peter Krempa) - tests: virstoragetest: Don't test relative start of backing chains (Peter Krempa) - util: storage: Remove now redundant backingRelative from virStorageSource (Peter Krempa) - tests: virstoragetest: Remove now unused pathAbs (Peter Krempa) - storage: Store relative path only for relatively backed storage (Peter Krempa) - tests: virstoragetest: Remove "expBackingStore" field (Peter Krempa) - util: storage: Add helper to resolve relative path difference (Peter Krempa) - LXC: check whether we get MemSwap[Total|Usage] (Chen Hanxiao) - qemu: enum cleanups in "src/qemu/*" (Julio Faracco) - libxl: fix version annotation of migration functions (Jim Fehlig) - virtportallocator: new function "virPortAllocatorSetUsed" (Giuseppe Scrivano) - net-dhcp-leases: Add virsh support (Nehal J Wani) - net-dhcp-leases: Private implementation inside network (Nehal J Wani) - net-dhcp-leases: Implement the remote protocol (Nehal J Wani) - net-dhcp-leases: Implement the public APIs (Nehal J Wani) - virNumaGetPages: Don't fail on huge page-less systems (Michal Privoznik) - virNumaGetPageInfo: Take huge pages into account (Michal Privoznik) - storage: gluster: Avoid name shadow on older compilers (Peter Krempa) - storage: gluster: Add backend to return unique storage file path (Peter Krempa) - util: storagefile: Introduce universal function to canonicalize paths (Peter Krempa) - util: string: Add helper to free non-NULL terminated string arrays (Peter Krempa) - libxl: prefer qdisk for <driver name='file'> (Jim Fehlig) - qemu: parse -device virtio-balloon (Laine Stump) - Report correct error in virNetDevTapCreate (Ján Tomko) - util: numa: Stub out hugepage code on non-Linux platforms (Peter Krempa) - util: numa: Catch readdir errors in virNumaGetPages (Peter Krempa) - tests: Fix syntax-check after cdd11151791bc9e61538988438980f41c0185681 (Peter Krempa) - test: Disable storage test when FS backend isn't compiled in (Peter Krempa) - Split out CCW address allocation (Ján Tomko) - libxl: Use cooperative resume for migration (Jason Andryuk) - cpu_arm: Support all ARM processors we know about (Michal Privoznik) - virNodeParseSocket: Take ARM into account (Michal Privoznik) - nodeinfotest: Print error if cpuinfo file can't be opened (Michal Privoznik) - virNodeParseNode: Propagate host architecture (Michal Privoznik) - nodeinfo: Introduce @arch to linuxNodeInfoCPUPopulate (Michal Privoznik) - interface: clean up virInterfaceDefDevFormat (Laine Stump) - interface: clean up virInterfaceDefParseXML (Laine Stump) - interface: move parsing of bridge attributes into appropriate function (Laine Stump) - interface: report link state for bonds and vlans too (Laine Stump) - security: Rename virSecurityManagerSetImageLabel to *Disk* (Peter Krempa) - security: Sanitize type of @migrated in virSecurityManagerRestoreAllLabel (Peter Krempa) - util: Don't require full disk definition when getting imagelabels (Peter Krempa) - util: storagefile: Introduce helper to free storage source perms (Peter Krempa) - util: seclabel: Add deep copy function for device labels (Peter Krempa) - storage: encryption: Add deep copy function for storage encryption (Peter Krempa) - libxl: limit support for specifying an interface script (Jim Fehlig) - libxl: support interface type=network (Jim Fehlig) - interface: allow reordering of elements in xml (Laine Stump) - nodeinfo: Implement nodeGetFreePages (Michal Privoznik) - virsh: Expose virNodeGetFreePages (Michal Privoznik) - Introduce virNodeGetFreePages (Michal Privoznik) - virCaps: expose pages info (Michal Privoznik) - virnuma: Introduce pages helpers (Michal Privoznik) - nodeinfo: Rename nodeGetFreeMemory to nodeGetMemory (Michal Privoznik) - virnuma: Introduce virNumaNodeIsAvailable (Michal Privoznik) - virsh: expose new active commit controls (Eric Blake) - blockjob: use stable disk string in job event (Eric Blake) - xen: handle root= in xen-xm configuration files. (Ian Campbell) - virt-aa-helper: allow access to /dev/vhost-net if needed (Serge Hallyn) - util: json: Add helpers for manipulating json arrays (Peter Krempa) - util: json: Unify function header formatting (Peter Krempa) - Increase the size of REMOTE_MIGRATE_COOKIE_MAX to REMOTE_STRING_MAX (Shivaprasad G Bhat) - nodedev: Introduce <pci-express/> to PCI devices (Michal Privoznik) - virpci: Introduce virPCIDeviceIsPCIExpress and friends (Michal Privoznik) - storage: better tests of lookup (Eric Blake) - storage: renumber lookup tests (Eric Blake) - storage: add alias for less typing (Eric Blake) - qemu: snapshot: Don't mark all block disks for metadata reuse (Peter Krempa) - bhyve: silent destroy command errors on cleanup (Roman Bogorodskiy) - bhyve: implement PCI address allocation (Roman Bogorodskiy) - virNetDevGetLinkInfo: Don't report link speed if NIC's not up (Michal Privoznik) - tests: virstoragetest: Fix output when hitting errors (Peter Krempa) - blockcommit: update error messages related to block jobs (Eric Blake) - virsh: improve blockcopy UI (Eric Blake) - virNodeDevCapPCIDevParseXML: Initialize numa_node variable (Michal Privoznik) - virsh: Reject negative numbers in vshCommandOptULongLong (Peter Krempa) - virsh: Reject negative numbers in vshCommandOptUL (Peter Krempa) - virsh: Reject negative numbers in vshCommandOptUInt (Peter Krempa) - security: Don't skip labelling for network disks (Peter Krempa) - storage: volume: Rework lookup of volume objects (Peter Krempa) - storage: Clean up unlocking of storage pool objects (Peter Krempa) - storage: pool: Fix handling of errors on pool lookup failure (Peter Krempa) - virsh: include bhyve in virsh -V output (Roman Bogorodskiy) - maint: exempt graphic binaries from syntax check (Eric Blake) - vmware: make version parsing more robust (Jean-Baptiste Rouault) - node_device: Expose link state & speed (Michal Privoznik) - interface_backend_udev: Implement link speed & state (Michal Privoznik) - virnetdev: Introduce virNetDevGetLinkInfo (Michal Privoznik) - virInterface: Expose link state & speed (Michal Privoznik) - vbox_tmpl.c: Add function for undefining snapshot (Yohan BELLEGUIC) - vbox_tmpl.c: Patch for redefining snapshots (Yohan BELLEGUIC) - Add vbox_snapshot_conf struct (Yohan BELLEGUIC) - vbox_tmpl.c: Better XML description for snapshots (Manuel VIVES) - qemu: ignore -nodefconfig and -nodefaults when parsing commandline (Laine Stump) - test: display qemuParseCommandline warnings when VIR_TEST_DEBUG > 0 (Laine Stump) - m4: bhyve: Fix check for the required bhyve programs (Peter Krempa) - vmx: Relax virtualHW.version check (Matthias Bolte) - conf: alter disk mirror xml output (Eric Blake) - conf: store mirroring information in virStorageSource (Eric Blake) - conf: store disk source as pointer, for easier manipulation (Eric Blake) - conf: consolidate disk def allocation (Eric Blake) - conf: store snapshot source as pointer, for easier manipulation (Eric Blake) - nodedev: Export NUMA node locality for PCI devices (Michal Privoznik) - Implement pretty flag for vcpuinfo and nodecpumap (Ján Tomko) - Introduce virBitmapDataToString (Ján Tomko) - Always report an error if virBitmapFormat fails (Ján Tomko) - Format NULL bitmap as an empty string (Ján Tomko) - virsh: Separate API calls and result printing in cmdVcpuinfo (Ján Tomko) - virsh: Invert logic in cmdVcpuinfo (Ján Tomko) - Parallels: Include CPU info in the capabilities XML (Alexander Burluka) - Parallels: add connectBaselineCPU() (Alexander Burluka) - Parallels: add domainGetVcpus() (Alexander Burluka) - maint: prohibit empty first lines (Martin Kletzander) - Remove unnecessary empty first lines (Martin Kletzander) - Simplify conditions in virStorageBackendProbeTarget (Ján Tomko) - Don't reuse 'ret' variable in virStorageBackendProbeTarget (Ján Tomko) - vircaps2xmltest: Introduce basic testing (Michal Privoznik) - libxl: introduce libxlDomainDefCheckABIStability (Jim Fehlig) - maint: detect VPATH builds when checking for gnulib update (Eric Blake) - maint: optimize locale.h syntax check (Eric Blake) - virnuma: Check for numa_bitmask_isbitset presence (Michal Privoznik) - cfg.mk: Introduce rule for setlocale() (Michal Privoznik) - virnuma: Implement virNumaGetDistances stub for non-NUMA (Michal Privoznik) - virCaps: Expose distance between host NUMA nodes (Michal Privoznik) - virnuma: Introduce virNumaGetDistances (Michal Privoznik) - tests: monitor: json: Fix error message when returning json in json (Peter Krempa) - libxl: Move virDomainXMLOptionNew into libxlCreateXMLConf (Daniel P. Berrange) - libxl: Don't pass libxlDriverPrivatePtr into libxlBuildDomainConfig (Daniel P. Berrange) - libxl: Don't pass virDomainObjPtr to libxlBuildDomainConfig (Daniel P. Berrange) - qemu: Return in from qemuDomainRemove*Device (Jiri Denemark) - tests: storagetest: Unify and reformat storage chain format string (Peter Krempa) - qemu: json: Add format strings for optional command arguments (Peter Krempa) - util: string: Return element count from virStringSplit (Peter Krempa) - storage: Traverse backing chains of network disks (Peter Krempa) - storage: Change to new backing store parser (Peter Krempa) - storage: Add infrastructure to parse remote network backing names (Peter Krempa) - storage: Switch metadata crawler to use storage driver file access check (Peter Krempa) - storage: Switch metadata crawler to use storage driver to read headers (Peter Krempa) - storage: Switch metadata crawler to use storage driver to get unique path (Peter Krempa) - storage: backend: Add possibility to suppress errors from backend lookup (Peter Krempa) - test: storage: Initialize storage source to correct type (Peter Krempa) - storage: Determine the local storage type right away (Peter Krempa) - storage: Move virStorageFileGetMetadata to the storage driver (Peter Krempa) - storage: Add API to check accessibility of storage volumes (Peter Krempa) - storage: backend: Add unique id retrieval API (Peter Krempa) - xenapi_utils: Adapt to enum cleanups (Michal Privoznik) - virnuma.c: Fix some comments (Michal Privoznik) - conf: more enum cleanups in "src/conf/domain_conf.h" (Julio Faracco) - conf: enum cleanups in "src/conf/domain_conf.h" (Julio Faracco) - cpu: use typedefs for enums in "src/cpu/cpu_map.h" (Julio Faracco) - virsh-nodedev: Avoid spurious errors (Michal Privoznik) - qemu: Process DEVICE_DELETED event in a separate thread (Jiri Denemark) - qemu: Finish device removal in the original thread (Jiri Denemark) - Add helper program to create custom leases (Nehal J Wani) Cleanups: - Remove redundant docs from libvirt.h (Jiri Denemark) - conf: whitespace tweak (Chen Fan) So thanks everybody for your contributions to this release and the python one, be it with reports, patches, documentation etc ... Enjoy ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.6
by Daniel Veillard 30 Jun '14

30 Jun '14

As stated yesterday, we just entered freeze for libvirt-1.2.6, I have pushed a first release candidate tarball and signed rpms at the usual place: ftp://libvirt.org/libvirt/ I gave it a try and with my limited testing it looks okay, but please have a look and test. The goal is to make the release on Tues 1st if all goes well. Also of note I will likely move the libvirt.org server Monday morning (chinese time i.e. sunday for most), it should be quick, just that if you hit the old IP untim DNS propagates you may have the old server (I will block ssh access after the move on the old to avoid split pushes) Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 2

Re: [Libvirt-announce] [libvirt] Entering freeze for libvirt-1.2.6
by Daniel Veillard 30 Jun '14

30 Jun '14

On Thu, Jun 26, 2014 at 02:12:50PM +0530, Nehal J Wani wrote: > > Python bindings can't be built, but that's just because > > virNetwork*DHCPLease* are not covered. > > I have sent a patch for the python bindings for virNetwork*DHCPLease* > APIs: http://www.redhat.com/archives/libvir-list/2014-June/msg01300.html and it broke again after the change to merge the 2 public APIs, a bit of cleanup is still needed there :-) Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] ANNOUNCE: Perl binding Sys-Virt release 1.2.5
by Daniel P. Berrange 02 Jun '14

02 Jun '14

I am pleased to announce that release 1.2.5 of Sys-Virt, the libvirt Perl API binding, is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-1.2.5.tar.gz Changed in the 1.2.5 release: - Add VIR_DOMAIN_{REBOOT,SHUTDOWN}_PARAVIRT constants - Add virDomainFSFreeze/virDomainFSThaw APIs - Add virDomainSetTime/virDomainGetTime APIs Further information, including online API documentation & previous release archives, is available from the CPAN home page http://search.cpan.org/dist/Sys-Virt/ Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Availability of libvirt-python-1.2.5
by Daniel Veillard 02 Jun '14

02 Jun '14

I also made a new release for the python bindings, they are available at: ftp://libvirt.org/libvirt/python they include support for the 2 new set of APIs introduced in 1.2.5 and a memory leak in older python version, so peope are also invited to update: - fix leak in memoryStats with older python (Martin Kletzander) - Implement virDomain{Get,Set}Time APIs (Michal Privoznik) - override: add virDomainFSFreeze and virDomainFSThaw API (Tomoki Sekiyama) thanks everybody ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Release fo libvirt-1.2.5
by Daniel Veillard 02 Jun '14

02 Jun '14

As planned the release of libvirt 1.2.5 is out, it is tagged in git and available as tarballs and rpms at the usual place: ftp://libvirt.org/libvirt/ This is a relatively small release in the number of commits, around 150, but includes a security fix (which happened to be my fault !) and 2 new set of APIs. There is also some interesting refactoring work and the usual flow of bug fixes, so people are really invited to update: Security: - LSN-2014-0003: Don't expand entities when parsing XML (Daniel P. Berrange) Features: - Introduce virDomain{Get,Set}Time APIs (Michal Privoznik) - Introduce virDomainFSFreeze() and virDomainFSThaw() public API (Tomoki Sekiyama) Portability: - build: avoid compiler warning on 32-bit platform (Eric Blake) - build: fix build with libselinux 2.3 (Cédric Bosdonnat) - qemu: Fix specifying char devs for PPC (Olivia Yin) - change machine name ppce500v2 to ppce500 (Olivia Yin) - tests: avoid dlsym mocking on mingw (Eric Blake) - avoid 'sync' as variable name (Pavel Hrdina) - Fix build wihout macvtap or virtualport (Ján Tomko) Bug Fixes: - util: fix DST end date in virtimetest timezones (Laine Stump) - qemu: snapshot: Improve detection of mixed snapshots (Peter Krempa) - qemu: snapshot: Reject internal active snapshot without memory state (Peter Krempa) - util: storage: Fix crash of libvirtd on network backed guest block-pull (Peter Krempa) - util: fix virTimeLocalOffsetFromUTC DST processing (Laine Stump) - qemu: managedsave: Don't spam logs with warnings about corrupted image (Peter Krempa) - utils: storage: Canonicalize paths only for local filesystems (Peter Krempa) - qemu: reject rather than hang on blockcommit of active layer (Eric Blake) - Clean up chardev sockets on QEMU shutdown (Ján Tomko) - qemu: fix <clock offset='variable' basis='localtime'/> (Laine Stump) - qemu: fix RTC_CHANGE event for <clock offset='variable' basis='utc'/> (Laine Stump) - qemu: Properly abort migration to a file (Jiri Denemark) - qemu: Send migrate_cancel when aborting migration (Jiri Denemark) - Fix error message when TUNNELLED flag is used in non-p2p migration (Jiri Denemark) - conf: fix backing store parse off-by-one (Eric Blake) - Fix crash in DAC driver with no seclabels (Ján Tomko) - util: fix memory leak in failure path of virCgroupKillRecursiveInternal (Chen Hanxiao) - qemu: Avoid leak in qemuDomainCheckRemoveOptionalDisk (Jiri Denemark) - qemu: Ignore temporary job errors when checking migration status (Jiri Denemark) - qemu: snapshot: Terminate job when memory compression program isn't found (Peter Krempa) - sanlock: avoid leak in acquire() (Martin Kletzander) - virsh: domain: Fix output of the VNC display number for domdisplay (Peter Krempa) - sanlock: don't fail with unregistered domains (Martin Kletzander) - storage: Resolve issues in failure path (John Ferlan) - spec: Don't install nonexistent test_libvirt_lockd.aug (Jiri Denemark) - spec: sanlock is x86_64 only on RHEL (Jiri Denemark) - Fix vlan ID detection in udev interface driver (Ján Tomko) Documentation: - bhyve driver documentation improvements (Roman Bogorodskiy) - virsh: fix typos in virsh man page (Eric Blake) - maint: fix typo in previous patch (Eric Blake) - fix documentation of virDomainSet(Get)Metadata (Dan Kenigsberg) - Fix an extra ' in a translated string (Daniel Veillard) - add a serial device with a seclabel example (Ján Tomko) - maint: fix typos related to disk name resolution (Eric Blake) - maint: fix typos related to 'frozen' (Eric Blake) - mention vagrant-libvirt in apps.html (James Shubin) - update documentation of <interface type='hostdev'> (Chunyan Liu) - update README-hacking (Chen Hanxiao) - virerror: Fix an error message typo (Cole Robinson) - fix a typo in formatdomain (Chen Hanxiao) - typos: fix s/it/is/ where applicable (Martin Kletzander) - datatypes: Fix comment of secret uuid (Li Yang) Improvements: - maint: cleanup detection of const'ness of selinux ctx (Jim Fehlig) - storage: fs: Drop-in replace use of virStorageFileGetMetadataFromBuf (Peter Krempa) - storage: Return backing format from virStorageFileGetMetadataFromFD (Peter Krempa) - util: new function virTimeLocalOffsetFromUTC (Laine Stump) - storage: Add storage file API to read file headers (Peter Krempa) - storage: Add support for access to files using provided uid/gid (Peter Krempa) - storage: Add NONE protocol type for network disks (Peter Krempa) - conf: Fix domain disk path iterator to work with networked storage (Peter Krempa) - storage: Rework debugging of storage file access through storage driver (Peter Krempa) - storage: Store gluster volume name separately (Peter Krempa) - qemu: Make qemuDomainPrepareDiskChainElement aware of remote storage (Peter Krempa) - qemu: process: Refresh backing chain info when reconnecting to qemu (Peter Krempa) - Don't log an internal error when the guest hasn't updated balloon stats (Ján Tomko) - qemuSetupCgroupForVcpu: s/virProcessInfoSetAffinity/virProcessSetAffinity/ (Michal Privoznik) - bhyve: fix virObjectUnlock() usage (Roman Bogorodskiy) - virdbus: Show method name in error message (Cole Robinson) - virdbus: Remove redundant error macro (Cole Robinson) - qemu: snapshot: Fix return value of external checkpoint with no disks (Peter Krempa) - qemu: snapshot: Forbid empty snapshots (Peter Krempa) - qemu: snapshot: Forbid partial internal snapshots (Peter Krempa) - qemu: snapshot: Use typecasted switch in qemuDomainSnapshotPrepare() (Peter Krempa) - bhyve: domain events support (Roman Bogorodskiy) - migration: add support for migrateURI configuration (Chen Fan) - util: refactor virNetlinkCommand to fix several bugs / style problems (Laine Stump) - build: nuke more uses of 'sync' (Eric Blake) - Return error when updating cdrom device (Pavel Hrdina) - Revert "maint: prefer enum over int for virstoragefile structs" (Eric Blake) - parallels: create VMs in the default place (Dmitry Guryanov) - parallels: add disks correctly (Dmitry Guryanov) - parallels: set file format in virDomainDef (Dmitry Guryanov) - parallels: add VIR_STORAGE_FILE_PLOOP format (Dmitry Guryanov) - conf: fix seclabels for chardevs (Ján Tomko) - Rename virDomainDiskSourceDefFormatSeclabel (Ján Tomko) - security_dac: honor relabel='no' in chardev config (Jim Fehlig) - security_dac: avoid relabeling hostdevs when relabel='no' (Jim Fehlig) - security_dac: honor relabel='no' in disk config (Jim Fehlig) - security_dac: avoid relabeling when relabel='no' (Jim Fehlig) - security_dac: rework callback parameter passing (Jim Fehlig) - security_dac: cleanup use of enum types (Jim Fehlig) - security_dac: annotate some functions with ATTRIBUTE_NONNULL (Jim Fehlig) - maint: prefer enum over int for virstoragefile structs (Eric Blake) - maint: shorten 'TypeType' function names (Eric Blake) - maint: use enum typedef for virstorageencryption.h (Eric Blake) - vbox: fix stale comment about vdi storage type (Eric Blake) - qemu: Implement virDomain{Get,Set}Time (Michal Privoznik) - virsh: Expose virDomain{Get,Set}Time (Michal Privoznik) - security_dac: Fix indentation (Jim Fehlig) - security_dac: Remove unnecessary curly braces (Jim Fehlig) - security_dac: Remove unnecessary ATTRIBUTE_UNUSED (Jim Fehlig) - virsh: reject undefine --wipe-storage without also naming storage (Li Yang) - conf: use typedefs for enums in "src/conf/snapshot_conf.h" (Julio Faracco) - conf: use typedefs for enums in "src/conf/storage_conf.h" (Julio Faracco) - conf: use typedefs for enums in "src/conf/nwfilter_conf.h" (Julio Faracco) - qemu: Make qemuProcess{Start,Stop}CPUs easier to follow (Jiri Denemark) - qemuDomainObjBeginNestedJob: Return -2 for temporary failures (Jiri Denemark) - qemu: Make qemuDomainObjBeginNestedJob static (Jiri Denemark) - qemu: extract common PCI handling functions (Roman Bogorodskiy) - qemu: extract PCI handling structs (Roman Bogorodskiy) - qemu: Adjust size for qcow2/qed if not on sector boundary (John Ferlan) - sanlock: code movement in virLockManagerSanlockAcquire (Martin Kletzander) - apibuild: Disallow 'returns' return description (Michal Privoznik) - qemu: Support mountpoints option of guest-fsfreeze-freeze (Tomoki Sekiyama) - virsh: Expose new virDomainFSFreeze and virDomainFSThaw API (Tomoki Sekiyama) - qemu: Implement virDomainFSFreeze and virDomainFSThaw (Tomoki Sekiyama) - conf: use typedefs for enums in node_device_conf, nwfilter_params (Julio Faracco) - libxl: fix support for <interface type="hostdev"> syntax (Chunyan Liu) - maint: use $(SED) instead of sed for syntax-check (Roman Bogorodskiy) - bhyve: implement connectGetSysinfo (Roman Bogorodskiy) - qemu: Implement a stub cpuArchDriver.compare() handler for arm and aarch64 (Oleg Strikov) - ESX: add virStorageVolGetInfo in iSCSI backend. (Dawid Zamirski) - parallels: add a set of trivial functions (Dmitry Guryanov) - parallels: don't add domain to the list twice (Dmitry Guryanov) - parallels: don't enable VNC when we define a new domain (Dmitry Guryanov) - parallels: fix virDomainDef.features comparison (Dmitry Guryanov) - Add support for timestamping QEMU logs (Ján Tomko) - qemu: track quiesced status in qemuDomainSnapshotFSFreeze (Tomoki Sekiyama) - remote: Implement virDomainFSFreeze and virDomainFSThaw (Tomoki Sekiyama) - udev: consider the device a CDROM when ID_CDROM=1 (Giuseppe Scrivano) - virdbus: Make virDBusCall static (Cole Robinson) - qemu: specify domain in host-side PCI addresses when needed/supported (Laine Stump) - qemu: add host-pci-multidomain capability (Laine Stump) - storageVolCreateXMLFrom: Allow multiple accesses to origvol (Michal Privoznik) - conf: use typedefs for enums in "src/conf/{network,interface}_conf.h" (Julio Faracco) - conf: use typedefs for enums in "src/conf/cpu_conf.h" (Julio Faracco) - util: use typedefs for enums in "src/util/" directory (Julio Faracco) - virsh: Replace list element to defined variable (Li Yang) - libxl: support PARAVIRT reboot flag (Jim Fehlig) - libxl: support PARAVIRT and ACPI shutdown flags (Jim Fehlig) - Introduce a new flag for controlling shutdown/reboot (Jim Fehlig) - conf: drop extra storage probe (Eric Blake) - bhyve: report cpuTime in bhyveDomainGetInfo (Roman Bogorodskiy) - bhyve: implement connectDomainXMLToNative (Roman Bogorodskiy) - bhyve: improve bhyve_command.c testability (Roman Bogorodskiy) Cleanup: - virSecurityDACRestoreSecurityHostdevLabel: Unmark @def as unused (Michal Privoznik) Thanks everybody who contributed in one way or anither to this release with bug reports, fixes, documentation and patch reviews ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.5
by Daniel Veillard 30 May '14

30 May '14

As planned I just tagged candidate release 1 in git and pushed the tarball, and signed rpms to the usual place: ftp://libvirt.org/libvirt/ I gave it a bit of testing, seems to work fine for me, I will probably provide an rc2 on Wed and aim for a release next week-end. In the meantime, please give it a try and report issues you may find ! thanks, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] LSN-2014-0003: Unsafe parsing of XML documents allows arbitrary file read
by Daniel P. Berrange 06 May '14

06 May '14

Libvirt Security Notice: LSN-2014-0003 ====================================== Summary: Unsafe parsing of XML documents allows arbitrary file read Reported on: 20140411 Published on: 20140506 Fixed on: 20140506 Reported by: Daniel P. Berrange <berrange(a)redhat.com> Richard Jones <rjones(a)redhat.com> Patched by: Daniel P. Berrange <berrange(a)redhat.com> See also: CVE-2014-0179 Description ----------- When parsing XML documents, libvirt passes the XML_PARSE_NOENT flag to libxml2 which instructs it to expand all entities in the XML document during parsing. This can be used to insert the contents of host OS files in the resulting parsed content. Although the flaw was introduced in 0.0.5, it was dormant having no ill effects, since the APIs involved all required the user to authenticate with privileges equivalent to root. In version 0.7.5 or later the virConnectCompareCPU / virConnectBaselineCPU methods activate the dormant bug, allowing for denial of service. In version 1.0.0 or later, if the admin opts in to using the new fine grained access control feature, there is potential for unprivileged information disclosure. Impact ------ A malicious user can pass libvirt an XML document which contains an entity that points to an arbitrary file on the host. When libvirt parses this document, it will insert the contents of that host file, which could allow the user to read the contents of files that they otherwise do not have permission to view. It also has the potential to cause a denial of service / indefinite hang of libvirt, if the entity points to a named pipe with no writer connected or certain proc files. If the libvirt installation is not using fine grained access control then virConnectCompareCPU and virConnectBaselineCPU APIs can be used by a read-only user to inflict a denial of service attack. If the libvirt installation is using fine grained access control, then as well as the denial of service attack, one or more of the following APIs can be used for information disclosure of files: virDomainDefineXML, virNetworkCreateXML, virNetworkDefineXML, virStoragePoolCreateXML, virStoragePoolDefineXML, virStorageVolCreateXML, virDomainCreateXML, virNodeDeviceCreateXML, virInterfaceDefineXML, virStorageVolCreateXMLFrom, virConnectDomainXMLFromNative, virConnectDomainXMLToNative, virSecretDefineXML, virNWFilterDefineXML, virDomainSnapshotCreateXML, virDomainSaveImageDefineXML, virDomainCreateXMLWithFiles, virConnectCompareCPU, virConnectBaselineCPU. Workaround ---------- Stop use of the fine grained access control mechanism, and restrict access to all the libvirt TCP/UNIX sockets to only trusted authenticated users. Simply denying access to the affected APIs in the access control policy is insufficient to mitigate the bug, since the XML document typically needs to be parsed before the access control check is applied in order to extra the UUID/name of the object to check. Access to the readonly libvirt socket must also be revoked Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v0.7.5 Broken in: v0.7.6 Broken in: v0.7.7 Broken in: v0.8.0 Broken in: v0.8.1 Broken in: v0.8.2 Broken in: v0.8.3 Broken in: v0.8.4 Broken in: v0.8.5 Broken in: v0.8.6 Broken in: v0.8.7 Broken in: v0.8.8 Broken in: v0.9.0 Broken in: v0.9.1 Broken in: v0.9.2 Broken in: v0.9.3 Broken in: v0.9.4 Broken in: v0.9.5 Broken in: v0.9.6 Broken in: v0.9.7 Broken in: v0.9.8 Broken in: v0.9.9 Broken in: v0.9.10 Broken in: v0.9.11 Broken in: v0.9.12 Broken in: v0.9.13 Broken in: v1.0.0 Broken in: v1.0.1 Broken in: v1.0.2 Broken in: v1.0.3 Broken in: v1.0.4 Broken in: v1.0.5 Broken in: v1.0.6 Broken in: v1.1.0 Broken in: v1.1.1 Broken in: v1.1.2 Broken in: v1.1.3 Broken in: v1.1.4 Broken in: v1.2.0 Broken in: v1.2.1 Broken in: v1.2.2 Broken in: v1.2.3 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: d6b27d3e4c40946efa79e91d134616b41b1666c4 Branch: v0.9.6-maint Broken in: v0.9.6.1 Broken in: v0.9.6.2 Broken in: v0.9.6.3 Broken in: v0.9.6.4 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: be7a5de9d0c406f36efae3230e1743c613ad6945 Branch: v0.9.11-maint Broken in: v0.9.11.1 Broken in: v0.9.11.2 Broken in: v0.9.11.3 Broken in: v0.9.11.4 Broken in: v0.9.11.5 Broken in: v0.9.11.6 Broken in: v0.9.11.7 Broken in: v0.9.11.8 Broken in: v0.9.11.9 Broken in: v0.9.11.10 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Branch: v0.9.12-maint Broken in: v0.9.12.1 Broken in: v0.9.12.2 Broken in: v0.9.12.3 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: 022b34cee73f86b01724b5279cf626df9cca245f Branch: v1.0.5-maint Broken in: v1.0.5.1 Broken in: v1.0.5.2 Broken in: v1.0.5.3 Broken in: v1.0.5.4 Broken in: v1.0.5.5 Broken in: v1.0.5.6 Broken in: v1.0.5.7 Broken in: v1.0.5.8 Broken in: v1.0.5.9 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: 4410a83e18c1b41f1f5d3f10a0b648fc9304bc35 Branch: v1.1.0-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 6f4eae73a0bf3e1c5e9597e4f9a8078cad69b1e3 Branch: v1.1.1-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: cfc94140e5989c9f3cce0fdbb758730818cb2572 Branch: v1.1.2-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 8fd2005cc0594742dc6cfab07a62f9774798a56d Branch: v1.1.3-maint Broken in: v1.1.3.1 Broken in: v1.1.3.2 Broken in: v1.1.3.3 Broken in: v1.1.3.4 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 46de45d079ae2622660fe147cf237ee617cc461c Branch: v1.1.4-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: e2b96d539f8a06e08cdf001627efe3f399db9c07 Branch: v1.2.0-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 9b1d09377492a4ce92498abb7cf830d693bc661c Branch: v1.2.1-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 877388678a77bacf802f97de429b2b350b02eb41 Branch: v1.2.2-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: ab07ebeb22b1d724999dc6eabc33cd6266de496f Branch: v1.2.3-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: a45368839fb898feb6b634df2bf337697155ea74 Branch: v1.2.4-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: a8480e2bc0d0b1c5cd98ff7424cace3e82db5ace Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0