- Announce - libvirt List Archives

[Libvirt-announce] SECURITY: CVE-2013-6436: libvirtd daemon crash when reading memory tunables for LXC guest in shutoff status
by Daniel P. Berrange 20 Dec '13

20 Dec '13

Libvirt Security Notice ======================= Summary: libvirtd daemon crash when reading memory tunables for LXC guest in shutoff status Reported on: 20131209 Published on: 20131220 Fixed on: 20131220 Reported by: Martin Kletzander <mkletzan(a)redhat.com> Patched by: Martin Kletzander <mkletzan(a)redhat.com> See also: CVE-2013-6436 Description ----------- The lxcDomainGetMemoryParameters method in the LXC driver did not check whether the guest being accessed was running or not. When shutoff there will be no virCgroupPtr instance associated with the guest. Reading memory tunables involves calling methods with the virCgroupPtr object as a parameter. This will lead to a crash accessing a NULL pointer. Impact ------ A user who has permission to invoke the virDomainGetMemoryParameters API against the LXC driver will be able to crash the libvirtd daemon. Access to this API is granted to any user who connects to the read-only libvirtd UNIX domain socket. If ACLs are active, access is granted to any user with the 'read' permission on the 'domain' object, which is granted by default to all users. As a result an unprivileged user will be able to inflict a denial of service attack on other users of the libvirtd daemon with higher privilege. Workaround ---------- The impact can be mitigated by blocking access to the read-only libvirtd UNIX domain socket, with policykit or the 'auth_unix_ro' parameter in '/etc/libvirt/libvirtd.conf'. If ACLs are active, the 'read' permission should be removed from any untrusted users. This will not prevent the crash, but will stop unprivileged users from inflicting the denial of service on higher privileged users. Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git Branch: master Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: f8c1cb90213508c4f32549023b0572ed774e48aa Branch: v1.0.5-maint Broken in: v1.0.5 Broken in: v1.0.5.1 Broken in: v1.0.5.2 Broken in: v1.0.5.3 Broken in: v1.0.5.4 Broken in: v1.0.5.5 Broken in: v1.0.5.6 Broken in: v1.0.5.7 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 218bd2e8716bcb4c90acf6ecaf879d606b46606b Branch: v1.0.6-maint Broken in: v1.0.6 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 80d682fd90bb7e97d8670be4cba1fe153438d7a0 Branch: v1.1.0-maint Broken in: v1.1.0 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 30a589bc4731488ca3428515ed57ce5446a83bbd Branch: v1.1.1-maint Broken in: v1.1.1 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 9a68d1354233f4cfca686655f8021e9477977e6e Branch: v1.1.2-maint Broken in: v1.1.2 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 79384018480f11ec6f2c2196039e67a9196d3e3a Branch: v1.1.3-maint Broken in: v1.1.3 Broken in: v1.1.3.1 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 66247dc5fffe5b9447f4db377c5adf02e6db97c4 Branch: v1.1.4-maint Broken in: v1.1.4 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 09956c7db764a0958034de6fac58aaaaf8e878bf Branch: v1.2.0-maint Broken in: v1.2.0 Broken by: cfed9ad4fb28e268e1467a0071c2fbc0c0873969 Fixed by: 705f388bceb4fce21b7c5ebc6310cb467c362239 Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.0.5.8 maintenance release
by Cole Robinson 14 Dec '13

14 Dec '13

libvirt 1.0.5.8 maintenance release is now available. This is libvirt 1.0.5 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.0.5.8.tar.gz Changes in this version: * Tie SASL callbacks lifecycle to virNetSessionSASLContext * spec: Don't save/restore running VMs on libvirt-client update * Return right error code for baselineCPU * spec: Don't save/restore running VMs on libvirt-client update * Fix busy wait loop in LXC container I/O handling * libvirt-guests: Run only after libvirtd * Don't depend on syslog.service * libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities * util: recognize SMB/CIFS filesystems as shared * Disable nwfilter driver when running unprivileged * spec: Explicitly require libgcrypt-devel For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.2 maintenance release
by Cole Robinson 14 Dec '13

14 Dec '13

libvirt 1.1.3.2 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.2.tar.gz Changes in this version: * Tie SASL callbacks lifecycle to virNetSessionSASLContext * spec: Don't save/restore running VMs on libvirt-client update * Return right error code for baselineCPU * qemu: hotplug: Fix adding USB devices to the driver list * qemu: hotplug: Fix double free on USB collision * qemu: hotplug: Only label hostdev after checking device conflicts * qemu: hotplug: Mark 2 private functions as static * qemu: Call qemuSetupHostdevCGroup later during hotplug * qemu: hostdev: Refactor PCI passhrough handling * qemu: snapshot: Detect internal snapshots also for sheepdog and RBD * spec: Don't save/restore running VMs on libvirt-client update * Fix busy wait loop in LXC container I/O handling * libvirt-guests: Run only after libvirtd * Don't depend on syslog.service * Fix migration with QEMU 1.6 * libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities * util: recognize SMB/CIFS filesystems as shared * Disable nwfilter driver when running unprivileged * qemu: don't use deprecated -no-kvm-pit-reinjection * qemu: Don't access vm->priv on unlocked domain * virpci: Don't error on unbinded devices * virSecurityLabelDefParseXML: Don't parse label on model='none' For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] Perl binding Sys-Virt release 1.2.0
by Daniel P. Berrange 04 Dec '13

04 Dec '13

I am pleased to announce that release 1.2.0 of Sys-Virt, the libvirt Perl API binding is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-1.2.0.tar.gz Changed in the 1.2.0 release: - Add all new constants in libvirt 1.2.0 - Fix reversed args for virNodeDeviceLookupSCSIHostByWWN Further information, including online API documentation & previous release archives, is available from the CPAN home page http://search.cpan.org/dist/Sys-Virt/ Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of libvirt-1.2.0
by Daniel Veillard 02 Dec '13

02 Dec '13

Technically this is also the first release of libvirt-python as this is the major change leading to the bump in middle version number. The libvirt tarballs and rpms are available at the usual place: ftp://libvirt.org/libvirt/ while libvirt-python-1.2.0 tarball and rpms are in the new location: ftp://libvirt.org/libvirts of course both git trees are now tagged and development can resume. The other 2 major user visible features are support for gluster pools at the storage level and support for VBox 4.3 . This is otherwise a relatively small release with less than 200 commits with a balanced ratio of bug fixes and improvements: Features: - Add support for gluster pool (Eric Blake) - Remove python binding (Daniel P. Berrange) - vbox: add support for 4.3 APIs (Ryota Ozaki) Documentation: - fix typos in libvirt.h.in (Chen Hanxiao) - Link libvirt-sandbox from apps page (Daniel P. Berrange) - Add docs about audit subsystem logging (Daniel P. Berrange) - virsh: fix doc typos (Nehal J Wani) - Fix typos in various docs (Nehal J Wani) - LXC: add securetty related note in Device nodes (Gao feng) - Fix three minor typos (Yuri Chornoivan) - storage: fix typo in previous patch (Eric Blake) - storage: document gluster pool (Eric Blake) - virDomainReboot: Document that migration might be unsafe (Michal Privoznik) - delete extra character (Wangyufei (A)) - maint: fix comment typos. (Eric Blake) - improve job info details (Eric Blake) - fix a typo in formatnwfilter.html.in (Chen Hanxiao) - Improve cgroups docs to cover systemd integration (Daniel P. Berrange) - fix typos in libvirt.h.in (Chen Hanxiao) - fix virDomainRestoreFlags description bug (Wang Yufei) - grammar fixes (Eric Blake) - add SystemTap to apps using libvirt (Jonathan Lebon) - fix a typo in formatnwfilter (Chen Hanxiao) - caps: Fix function docs for virCapabilitiesAddHostNUMACell (Peter Krempa) Portability: - tests: fix virpcitest with read-only srcdir (Eric Blake) - tests: guarantee abs_srcdir in all C tests (Eric Blake) - look for numad in /usr/sbin (Jim Fehlig) - build: Don't fail on '<' or '>' with old xmllint (Martin Kletzander) - spec: fix libvirt-docs subpackage on RHEL-6 (Michael Chapman) - Don't depend on syslog.service (Guido Günther) - qemuMonitorJSONGetCPUx86Data: Don't fail on ancient qemus (Michal Privoznik) - build: work around super-old readline.h (Ryota Ozaki) - Fix migration with QEMU 1.6 (Michael Avdienko) - nodeinfo: fix build on non-Linux (Eric Blake) Bug Fixes: - vbox: handle errors of virDomainHostdevDefAlloc correctly (Ryota Ozaki) - vbox: fix incorrect loop condition in vboxHostDeviceGetXMLDesc (Ryota Ozaki) - Fix memory leak in virNWFilterDefParseXML() (Nehal J Wani) - Fix memory leak in virDomainDefParseXML() (Nehal J Wani) - LXC: Ensure security context is set when mounting images (Daniel P. Berrange) - network: properly update iptables rules during net-update (Laine Stump) - Fix bug in identifying sub-mounts (Daniel P. Berrange) - storage: skip selinux cleanup when fd not available (Eric Blake) - qemu: preserve netdev MAC address during 'domxml-to-native' (Bing Bu Cao) - storage: don't read storage volumes in nonblock mode (Eric Blake) - LXC: don't unmount mounts for shared root (Gao feng) - LXC: fix the problem that libvirt lxc fail to start on latest kernel (Gao feng) - sasl: Fix authentication when using PLAIN mechanism (Christophe Fergeau) - Fix invalid read in virNetSASLSessionClientStep debug log (Christophe Fergeau) - Tie SASL callbacks lifecycle to virNetSessionSASLContext (Christophe Fergeau) - remote: Don't leak priv->tls object on connection failure (Christophe Fergeau) - spec: Don't save/restore running VMs on libvirt-client update (Jiri Denemark) - virsh domxml-from-native to treat SCSI as the bus type for pseries by default (Shivaprasad G Bhat) - Don't start a nested job in qemuMigrationPrepareAny (Ján Tomko) - spec: Don't save/restore running VMs on libvirt-client update (Cole Robinson) - spec: Restrict virt-login-shell usage (Jiri Denemark) - storage: use valid XML for awkward volume names (Eric Blake) - storage: Returns earlier if source adapter of the scsi pool is a HBA (Osier Yang) - libvirt-guests: Run only after libvirtd (Cole Robinson) - Fix off-by-1 in default SELinux MCS range (Daniel P. Berrange) - vbox: fix segfault on virsh dumpxml with the existence of USB filters (Ryota Ozaki) - Add missing 'return 0;' in stub lxcStartFuse() method impl. (Daniel P. Berrange) - Avoid async signal safety problem in glibc's setxid (Daniel P. Berrange) - Don't release spice port twice when no TLS port is available (Ján Tomko) - Properly unref a connection with a close callback (Ján Tomko) - qemu: Call qemuSetupHostdevCGroup later during hotplug (Jiri Denemark) - qemuMonitorIO: Don't use @mon after it's unrefed (Michal Privoznik) - qemuProcessReconnectHelper: Don't create joinable thread (Michal Privoznik) - virDomainEventCallbackListFree: Don't leak @list->callbacks (Michal Privoznik) - networkBuildDhcpDaemonCommandLine: Don't leak @configstr and @configfile (Michal Privoznik) - Disable nwfilter driver when running unprivileged (Ján Tomko) - libxl: Fix Xen 4.4 libxlVmStart logic (Jason Andryuk) - qemu: Check for presence of device and properities when getting CPUID (Peter Krempa) - Fix busy wait loop in LXC container I/O handling (Daniel P. Berrange) - Don't expose 'none' machine type to capabilities (Daniel P. Berrange) - Fix mem leak in virQEMUCapsProbeQMPMachineTypes on OOM (Daniel P. Berrange) - virSecurityLabelDefParseXML: Don't parse label on model='none' (Michal Privoznik) - virsh-domain: Mark --live and --config mutually exclusive in vcpucount (Peter Krempa) - qemu: Fix SCSI hotplug on pseries guests (Vitor de Lima) - pci: properly handle out-of-order SRIOV virtual functions (Laine Stump) - util: use -w flag when calling iptables (Serge Hallyn) - storage: Fix a vol-clone bug on ppc64 (Li Zhang) - qemu: Don't access vm->priv on unlocked domain (Michal Privoznik) - qemu: Avoid double free of VM (Michal Privoznik) - Allow root directory in filesystem source dir schema (Ján Tomko) - qemuMigrationBeginPhase: Check for 'drive-mirror' for NBD (Michal Privoznik) - conf: fix incorrect error log in virCPUDefIsEqual (Chen Hanxiao) - qemuMonitorDispose: Reset lastError (Michal Privoznik) - qemu: clean up migration ports when migration cancelled (Zeng Junliang) - network: fix connections count in case of allocate failure (Laine Stump) - virpcitest: Fix variable arguments using in pci_driver_new (Michal Privoznik) - virpci: Don't error on unbinded devices (Michal Privoznik) Improvements: - Pull lxcContainerGetSubtree out into shared virfile module (Daniel P. Berrange) - Introduce standard methods for sorting strings with qsort (Daniel P. Berrange) - conf: Export virStorageVolType enum helper functions (Peter Krempa) - sasl: Replace 'restep' label with 'continue' (Christophe Fergeau) - storage: probe qcow2 volumes in gluster pool (Eric Blake) - storage: improve handling of symlinks in gluster (Eric Blake) - storage: improve allocation stats reported on gluster files (Eric Blake) - storage: improve directory support in gluster pool (Eric Blake) - storage: add network-dir as new storage volume type (Eric Blake) - storage: implement rudimentary glusterfs pool refresh (Eric Blake) - storage: initial support for linking with libgfapi (Eric Blake) - storage: expose volume meta-type in XML (Eric Blake) - storage: allow interleave in volume XML (Eric Blake) - maint: next release is 1.2.0 (Eric Blake) - vbox: import vbox_CAPI_v4_3.h from SDK (Ryota Ozaki) - vbox: pull vboxHostDeviceGetXMLDesc out from vboxDomainGetXMLDesc (Ryota Ozaki) - vbox: cleanup vboxAttachUSB (Ryota Ozaki) - lxc: don't do duplicate work when getting pagesize (Chen Hanxiao) - maint: update to latest gnulib (Eric Blake) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - python: remove virConnectGetCPUModelNames from globals (Doug Goldstein) - qemu: Auto-generate controller for hotplugged hostdev (Eric Farman) - qemu: Separate calls based on controller bus type (Eric Farman) - qemu: Rename controller hotplug functions to not be PCI-specific (Eric Farman) - qemu: Add support for virt machine type with virtio-mmio devices on armv7 (Clark Laughlin) - maint: enforce comma style usage (Eric Blake) - maint: fix comma style issues: remaining code (Eric Blake) - maint: fix comma style issues: remaining drivers (Eric Blake) - maint: fix comma style issues: vbox (Eric Blake) - maint: fix comma style issues: python (Eric Blake) - maint: fix comma style issues: util (Eric Blake) - maint: fix comma style issues: tests, tools (Eric Blake) - maint: fix comma style issues: qemu (Eric Blake) - maint: fix comma style issues: xen (Eric Blake) - maint: fix comma style issues: conf (Eric Blake) - maint: fix comma style issues: nwfilter (Eric Blake) - Error out on unterminated arrays and objects in JSON parser (Ján Tomko) - Test if JSON parser fails on invalid input (Ján Tomko) - maint: ship .pl scripts as executables (Eric Blake) - Fix virsh net-info output for consistency (Hao Liu) - Add missing break to switch-case block (Doug Goldstein) - qemumonitorjsontest: Introduce GetNonExistingCPUData test (Michal Privoznik) - Macro for testing the version you are compiling with (Doug Goldstein) - Return -1 in virPortAllocatorAcquire if all ports are used (Ján Tomko) - Add a name to virPortAllocator (Ján Tomko) - storage: fix RNG validation of gluster via netfs (Eric Blake) - virsh-secret: Unify list column alignment (Peter Krempa) - virsh-interface: Unify list column alignment (Peter Krempa) - virsh-nwfilter: Unify list command column alignment (Peter Krempa) - virsh-pool: Unify spacing of listing function (Peter Krempa) - qemu: Change return type of qemuMonitorGetGuestCPU() (Peter Krempa) - virsh-volume: Unify strigification of volume type (Peter Krempa) - virsh-volume: Unify alignment of vol-list output columns (Peter Krempa) - conf: Refactor virDomainDiskSourceDefParse (Peter Krempa) - conf: Rename virDomainDiskHostDefFree to virDomainDiskHostDefClear (Peter Krempa) - conf: Split out code to parse the source of a disk definition (Peter Krempa) - qemuDomainObjStart: Warn on corrupted image (Michal Privoznik) - util: use size_t instead of unsigned int for num_virtual_functions (Laine Stump) - qemu: assign PCI address to primary video card (Vitor de Lima) - qemu: process: Validate specific CPUID flags of a guest (Peter Krempa) - qemu: Add support for paravirtual spinlocks in the guest (Peter Krempa) - conf: Refactor storing and usage of feature flags (Peter Krempa) - cpu: x86: Add internal CPUID features support and KVM feature bits (Peter Krempa) - qemu: Add monitor APIs to fetch CPUID data from QEMU (Jiri Denemark) - cpu_x86: Refactor storage of CPUID data to add support for KVM features (Peter Krempa) - tests: Distribute virpcitestdata (Michal Privoznik) - tests: Fix virtpcitest in VPATH (Jiri Denemark) - conf: Refactor virDomainDiskSourcePoolDefParse (Peter Krempa) - storage: always probe type with buffer (Eric Blake) - storage: refactor backing chain division of labor (Eric Blake) - storage: reduce number of stat calls (Eric Blake) - storage: avoid short reads while chasing backing chain (Eric Blake) - storage: use simpler 'char *' (Eric Blake) - test driver: add support for .connectBaselineCPU (Giuseppe Scrivano) - virpcitest: Introduce testVirPCIDeviceReset (Michal Privoznik) - virt-login-shell: also build virAtomic.h (Guido Günther) - storage: recognize gluster as networked file (Eric Blake) - qemu: don't use deprecated -no-kvm-pit-reinjection (Ján Tomko) - Resolve Coverity issue regarding not checking return value (John Ferlan) - Skip any files which are not mounted on the host (Daniel P. Berrange) - Add flag to lxcBasicMounts to control use in user namespaces (Daniel P. Berrange) - Remove duplicate entries in lxcBasicMounts array (Daniel P. Berrange) - Remove pointless 'srcpath' variable in lxcContainerMountBasicFS (Daniel P. Berrange) - Remove unused 'opts' field from LXC basic mounts struct (Daniel P. Berrange) - Add virFileIsMountPoint function (Daniel P. Berrange) - virpcitest: Introduce check for unbinded devices (Michal Privoznik) - virpcitest: Introduce testVirPCIDeviceReattach (Michal Privoznik) - virpcitest: Test virPCIDeviceDetach (Michal Privoznik) - tests: Introduce virpcitest (Michal Privoznik) - cpu: x86: Parse the CPU feature map only once (Peter Krempa) - cpu: Export few x86-specific APIs (Jiri Denemark) - nodeinfo: Remove libnuma include (Peter Krempa) - numa: Add wrapper of numa_node_to_cpus and use it (Peter Krempa) - numa: Replace NUMA_MAX_N_CPUS macro with virNumaGetMaxCPUs() (Peter Krempa) - nodeinfo: Get rid of nodeGetCellMemory (Peter Krempa) - numa: Introduce virNumaGetNodeMemory and use it instead of numa_node_size64 (Peter Krempa) - numa: Introduce virNumaGetMaxNode and use it instead of numa_max_node (Peter Krempa) - nodeinfo: Avoid forward declarations of static functions (Peter Krempa) - numa: Introduce virNumaIsAvailable and use it instead of numa_available (Peter Krempa) Cleanups: - Remove obsolete 'tests' makefile target (Daniel P. Berrange) - Mostly revert "python: remove virConnectGetCPUModelNames from globals" (Daniel P. Berrange) - Remove redundant braces (Ján Tomko) - virPCIDeviceBindToStub: Remove unused @oldDriverPath and @oldDriverName (Michal Privoznik) Thanks to everybody who have helped on this release, with bug reports, fixes, features or documentation updates ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for 1.2.0, rc1 available
by Daniel Veillard 28 Nov '13

28 Nov '13

So as planned we are entering freeze for libvirt-1.2.0, I just tagged the git trees - plural as we now use libvirt-python separate git for this binding - and pushed tarballs and rpms to the usual place at: ftp://libvirt.org/libvirt/ it did allows a correct update at the rpm level for me and virt-manager does work correctly at least with my minimal testing. We now need further reviews, obviously on the portability front especially as the python bindings are a separate tarball. It would be cool to get more testing on specific aspects of the release too, like the gluster pool and VBox 4.3 support. Give it a try, thanks ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] ANNOUNCE: libvirt-sandbox "Cholistan" release 0.5.1
by Daniel P. Berrange 19 Nov '13

19 Nov '13

I pleased to announce the a new public release of libvirt-sandbox, version 0.5.0, is now available for download ftp://libvirt.org/libvirt/sandbox/ The packages are GPG signed with Key fingerprint: DAF3 A6FD B26B 6291 2D0E 8E3F BE86 EBB4 1510 4FDF (4096R) The libvirt-sandbox package provides an API layer on top of libvirt-gobject which facilitates the cration of application sandboxes using virtualization technology. An application sandbox is a virtual machine or container that runs a single application binary, directly from the host OS filesystem. In other words there is no separate guest operating system install to build or manager. At this point in time libvirt-sandbox can create sandboxes using either LXC or KVM, and should in theory be extendable to any libvirt driver. This release focused on exclusively on bugfixing Changed in this release: - Fix path to systemd binary (prefers dir /lib/systemd not /bin) - Remove obsolete commands from virt-sandbox-service man page - Fix delete of running service container - Allow use of custom root dirs with 'virt-sandbox --root DIR' - Fix 'upgrade' command for virt-sandbox-service generic services - Fix logrotate script to use virsh for listing sandboxed services - Add 'inherit' option for virt-sandbox '-s' security context option, to auto-copy calling process' context - Remove non-existant '-S' option froom virt-sandbox-service man page - Fix line break formatting of man page - Mention LIBVIRT_DEFAULT_URI in virt-sandbox-service man page - Check some return values in libvirt-sandbox-init-qemu - Remove unused variables - Fix crash with partially specified mount option string - Add man page docs for 'ram' mount type - Avoid close of un-opened file descriptor - Fix leak of file handles in init helpers - Log a message if sandbox cleanup fails - Cope with domain being missing when deleting container - Improve stack trace diagnostics in virt-sandbox-service - Fix virt-sandbox-service content copying code when faced with non-regular files. - Improve error reporting if kernel does not exist - Allow kernel version/path/kmod to be set with virt-sandbox - Don't overmount '/root' in QEMU sandboxes by default - Fix nosuid / nodev mount options for tmpfs - Force 9p2000.u protocol version to avoid QEMU bugs - Fix cleanup when failing to start interactive sandbox - Create copy of kernel from /boot to allow relabelling - Bulk re-indent of code - Avoid crash when gateway is missing in network options - Fix symlink target created in multi-user.target.wants - Add '-p PATH' option for virt-sandbox-service clone/delete to match 'create' command option. - Only allow 'lxc:///' URIs with virt-sandbox-service until further notice - Rollback state if cloning a service sandbox fails - Add more kernel modules instead of assuming they are all builtins - Don't complain if some kmods are missing, as they may be builtins - Allow --mount to be repeated with virt-sandbox-service Thanks to everyone who contributed to this release Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.1 maintenance release
by Cole Robinson 06 Nov '13

06 Nov '13

libvirt 1.1.3.1 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.1.tar.gz Changes in this version: * Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs * Fix race condition reconnecting to vms & loading configs * Fix leak of objects when reconnecting to QEMU instances * Don't update dom->persistent without lock held * Block all use of libvirt.so in setuid programs * Remove (nearly) all use of getuid()/getgid() * Add stub getegid impl for platforms lacking it * Don't allow remote driver daemon autostart when running setuid * Only allow the UNIX transport in remote driver when setuid * Block all use of getenv with syntax-check * Remove all direct use of getenv * Make virCommand env handling robust in setuid env * Initialize threading & error layer in LXC controller * Fix flaw in detecting log format * Move virt-login-shell into libvirt-login-shell sub-RPM * Set a sane $PATH for virt-login-shell * remote: fix regression in event deregistration * python: Fix Create*WithFiles filefd passing * build: fix build of virt-login-shell on systems with older gnutls * build: fix linking virt-login-shell * Don't link virt-login-shell against libvirt.so (CVE-2013-4400) * Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) * Only allow 'stderr' log output when running setuid (CVE-2013-4400) * Add helpers for getting env vars in a setuid environment * Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) * build: Add lxc testcase to dist list * Convert uuid to a string before printing it * LXC: Fix handling of RAM filesystem size units * qemuMonitorJSONSendKey: Avoid double free * rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X * Remove use of virConnectPtr from all remaining nwfilter code * Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' * Remove virConnectPtr arg from virNWFilterDefParse * qemu: cgroup: Fix crash if starting nographics guest * virNetDevBandwidthEqual: Make it more robust * qemu_hotplug: Allow QoS update in qemuDomainChangeNet * Adjust legacy max payload size to account for header information For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.0.5.7 maintenance release
by Cole Robinson 06 Nov '13

06 Nov '13

libvirt 1.0.5.7 maintenance release is now available. This is libvirt 1.0.5 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.0.5.7.tar.gz Changes in this version: * qemuSetupMemoryCgroup: Handle hard_limit properly * qemu: Drop qemuDomainMemoryLimit * remote: fix regression in event deregistration * virsh: Fix debugging * Fix URI connect precedence * virDomainDefParseXML: set the argument of virBitmapFree to NULL after calling virBitmapFree * build: Add lxc testcase to dist list * LXC: Fix handling of RAM filesystem size units * qemuMonitorJSONSendKey: Avoid double free * virsh domjobinfo: Do not return 1 if job is NONE * Remove use of virConnectPtr from all remaining nwfilter code * Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' * Remove virConnectPtr arg from virNWFilterDefParse * virNetDevBandwidthEqual: Make it more robust * qemu_hotplug: Allow QoS update in qemuDomainChangeNet * qemu: Use "migratable" XML definition when doing external checkpoints * qemu: Fix checking of ABI stability when restoring external checkpoints * virsh: Fix regression of vol-resize For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] libvirt-1.4.4 is out
by Daniel Veillard 04 Nov '13

04 Nov '13

As planned I tagged the git tree earlier today and pushed tarballs and rpms to the usual place: ftp://libvirt.org/libvirt/ The release is a bit smaller than usual in terms of commited patches probably due to a large part of the team travelling to KVM Forum ! This is mostly a bug fix and maintainance release, it includes 4 important security patches in addition to the usual set of bug and leak fixes. To note the added support for ARM 64 bits arch, and quite a large set of portability fixes: Features: - Add support for AArch64 architecture (Pranavkumar Sawargaonkar) - Various improvements on test code and test driver (many people) Security: - Don't link virt-login-shell against libvirt.so (CVE-2013-4400) (Daniel P. Berrange) - Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) (Daniel P. Berrange) - Only allow 'stderr' log output when running setuid (CVE-2013-4400) (Daniel P. Berrange) - Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) (Daniel P. Berrange) Documentation: - generate links from plain text documentation (Claudio Bley) - define style of code blocks inside descriptions (Claudio Bley) - add class "description" to div's containing descriptions (Claudio Bley) - process code blocks similar to Markdown (Claudio Bley) - fix typos in formatnwfilter (Chen Hanxiao) - fix a typo in formatdomain (Chen Hanxiao) - virsh: fix doc typos (Eric Blake) - maint: typo fixes (Eric Blake) - fix some typos about 'informations' (Chen Hanxiao) - fix a typo in formatdomain (Chen Hanxiao) - Expand description of host-model CPU mode (Jiri Denemark) - virsh: fix a typo in virsh-domain (Chen Hanxiao) - storage: document existing pools (Eric Blake) - remote-driver: Fix 'leav' typo in comment (Christophe Fergeau) - change the minimum weight description for blkio (Chen Hanxiao) - Add some notes about secure usage of libvirt (Daniel P. Berrange) - lxc: Fix an improper comment in lxc_process.c (Chen Hanxiao) - nwfilter: fix a typo in nwfilter_gentech_driver.c (Hongwei Bi) - cgroup: fix a comment typo in vircgroup.c (Chen Hanxiao) - fix typo in HACKING (Chen Hanxiao) - aclpolkit: Fix a heading typo (Cole Robinson) Portability: - virnetsocket: fix getsockopt on FreeBSD (Ryota Ozaki) - MacOS: Handle changes to xdrproc_t definition (Doug Goldstein) - fix api changes in xen restore (Bamvor Jian Zhang) - MacOS: Re-add support for QEMU backend (Doug Goldstein) - rpc: Retrieve peer PID via new getsockopt() for Mac (Doug Goldstein) - build: fix build of virt-login-shell on systems with older gnutls (Jim Fehlig) - build: fix linking virt-login-shell (Jim Fehlig) - nodeinfo: fix physical memory size on Mac OS X (Ryota Ozaki) - Add stub getegid impl for platforms lacking it (Daniel P. Berrange) - better error checking for LOCAL_PEERCRED (Brian Candler) - Add support for detecting PPC little endian arches (Daniel P. Berrange) - xenapi: Fix build after const correctnes changes (Peter Krempa) - rpc: Fix getsockopt on Snow Leopard and lower (Doug Goldstein) - build: fix linker error on FreeBSD (Giuseppe Scrivano) - tests: avoid compile failure on linux kernels older than 2.6.19 (Giuseppe Scrivano) - nodeinfo: make freebsdNodeGetCPUCount work on Mac OS X (Ryota Ozaki) - rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X (Ryota Ozaki) - build: fix build on 32-bit platforms (Eric Blake) - build: fix build on RHEL 5 (Eric Blake) - build: fix build --without-remote (Eric Blake) Bug fixes: - Fix race in starting transient VMs (Daniel P. Berrange) - Use a port from the migration range for NBD as well (Ján Tomko) - nodedev_hal: fix segfault when virDBusGetSystemBus fails (Ryota Ozaki) - Fix race condition reconnecting to vms & loading configs (Daniel P. Berrange) - Don't update dom->persistent without lock held (Daniel P. Berrange) - storage: fix incorrect typedef (Eric Blake) - apparmor: Fix typo in function name in driver struct initialization (Peter Krempa) - qemu: fix well-formed migration URI formatting (Michael Chapman) - LXC: don't free tty before using it in lxcContainerSetupDevices (Gao feng) - python: Fix Create*WithFiles filefd passing (Marian Neagul) - networkStartDhcpDaemon: Check for dnsmasqCapsRefresh failure (Hongwei Bi) - virsh: Fix job watching when STDIN is not a tty (Peter Krempa) - qemu: fix removal of <interface type='hostdev'> (Laine Stump) - Fix a problem introduced by commit 99889012 (Geoff Hickey) - qemu: Avoid assigning unavailable migration ports (Wang Yufei) - viralloc.h: Fix typo in VIR_APPEND_ELEMENT_COPY_QUIT (Michal Privoznik) - remote: fix regression in event deregistration (Zhou Yimin) - daemon: don't free domain if it's null (Chen Hanxiao) - Remove ATTRIBUTE_NONNULL(3) from qemuMonitorJSONDrivePivot (John Ferlan) - rpc: Correct the wrong payload size checking (Osier Yang) - Fix typo breaking cgroups for NBD backed filesystems (Daniel P. Berrange) - Ignore thin pool LVM devices. (Dusty Mabe) - domain_conf.c: Initialize arrVar and cntVar (Michal Privoznik) - vbox: handle 'saved' state of VMs (Ryota Ozaki) - esx: Fix floppy.fileName handling in the vmx file parser (Geoff Hickey) - Convert uuid to a string before printing it (Ján Tomko) - Initialize threading & error layer in LXC controller (Daniel P. Berrange) - Don't ignore all dbus connection errors (Daniel P. Berrange) - Fix exit status of lxc controller (Daniel P. Berrange) - Fix flaw in detecting log format (Daniel P. Berrange) - qemu_migration: Avoid crashing if domain dies too quickly (Michal Privoznik) - util: fix two virCompareLimitUlong bugs (Bing Bu Cao) - storage_backend: Fix issue with allocation of 0 length volume (John Ferlan) - qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (Michal Privoznik) - LXC: Fix handling of RAM filesystem size units (Ján Tomko) - Don't clobber 'ret' variable in testCompareXMLToXMLHelper (Daniel P. Berrange) - Adjust legacy max payload size to account for header information (Claudio Bley) - storage: fix file allocation behavior in file cloning (Oskari Saarenmaa) - virfile: safezero: fix buffer allocation max size (Oskari Saarenmaa) - test: Fix coverity warnings (Cole Robinson) - nodedev: Resolve Relax-NG validity error (John Ferlan) - Free cmd in virNetDevVethCreate (Gao feng) - Free cmd in virNetDevVethDelete (Gao feng) - qemu: check actual netdev type rather than config netdev type during init (Laine Stump) - qemuMonitorTestFree: Join worker thread (Michal Privoznik) - Avoid deleting NULL veth device name (Daniel P. Berrange) - qemuMonitorJSONSendKey: Avoid double free (Michal Privoznik) - qemuMonitorJSONGetVirtType: Fix error message (Michal Privoznik) - qemu: cgroup: Fix crash if starting nographics guest (Cole Robinson) - selinux: Only close the selabel_handle once (Ján Tomko) - Fix handling of IPv6 listen addresses in cmdDomDisplay (Ján Tomko) - util: recognize SMB/CIFS filesystems as shared (Laine Stump) - Fix leak of objects when reconnecting to QEMU instances (Daniel P. Berrange) Improvements: - libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities (Jeremy Fitzhardinge) - Improve debugging of QEMU start/stop (Daniel P. Berrange) - Improve debugging of job enter/exit code (Daniel P. Berrange) - storage: use correct type for array count (Eric Blake) - maint: avoid further typedef accidents (Eric Blake) - libvirt.c: indent code of virDomainGetMemoryParameters's documentation (Claudio Bley) - libvirt.c: add 2 spaces of indentation to example code of virStreamSend (Claudio Bley) - Add '+' to uid/gid printing for label processing (John Ferlan) - Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (Daniel P. Berrange) - capabilities: add baselabel per sec driver/virt type to secmodel (Giuseppe Scrivano) - security: add new internal function "virSecurityManagerGetBaseLabel" (Giuseppe Scrivano) - security: use a single function to set DAC user and group (Giuseppe Scrivano) - virsh: new environment variable VIRSH_HISTSIZE (Pavel Raiskup) - maint: update to latest gnulib (Eric Blake) - Skip debug message in lxcContainerSetID if no map is set. (Chen Hanxiao) - Avoid Coverity DEADCODE warning (John Ferlan) - virsh: allow alias to expand to opt=value pair (Eric Blake) - Ignore GNU Global tag files (Martin Kletzander) - build: Fix prohibit_int_ijk (and iijjkk) on RHEL 5 (Martin Kletzander) - Get rid of shadowed booleans (Michal Privoznik) - vircgroupmock: Mock access() to some more files (Michal Privoznik) - tests: Use lv_abs_top_builddir instead of bare abs_top_builddir (Michal Privoznik) - qemu: move qemuDomainRemoveNetDevice to avoid forward reference (Laine Stump) - qemu: simplify calling qemuDomainHostdevNetConfigRestore (Laine Stump) - Move virt-login-shell into libvirt-login-shell sub-RPM (Daniel P. Berrange) - Block all use of libvirt.so in setuid programs (Daniel P. Berrange) - Remove (nearly) all use of getuid()/getgid() (Daniel P. Berrange) - Don't allow remote driver daemon autostart when running setuid (Daniel P. Berrange) - Only allow the UNIX transport in remote driver when setuid (Daniel P. Berrange) - Block all use of getenv with syntax-check (Daniel P. Berrange) - Remove all direct use of getenv (Daniel P. Berrange) - Make virCommand env handling robust in setuid env (Daniel P. Berrange) - Set a sane $PATH for virt-login-shell (Daniel P. Berrange) - Add helpers for getting env vars in a setuid environment (Daniel P. Berrange) - qemu: Fix augeas support for migration ports (Michal Privoznik) - qemu: Make migration port range configurable (Jiri Denemark) - netcf: Don't complain when cleanup is called before init (Christophe Fergeau) - virsh: improve usability of '--print-xml' flag for attach-disk command (Chen Hanxiao) - esx: Remove unnecessary NULL comparisons (3/3) (Geoff Hickey) - esx: Remove unnecessary NULL comparisons (2/3) (Geoff Hickey) - esx: Remove unnecessary NULL comparisons (1/3) (Geoff Hickey) - Add support for enabling SASL for SPICE guests (Daniel P. Berrange) - qemuDomainCleanupRemove: s/memmove/VIR_DELETE_ELEMENT_INPLACE/ (Michal Privoznik) - build: use the gnulib version of the .m4 files when present (Giuseppe Scrivano) - storage: allow interleave in pool XML (Eric Blake) - Add some logging to LXC disk/fs nbd/loop setup (Daniel P. Berrange) - Add logging to LXC cgroup devices setup (Daniel P. Berrange) - Add log statement when NBD device is setup (Daniel P. Berrange) - AArch64: Add qemu capabilities schemeta for test. (Pranavkumar Sawargaonkar) - Implement minimal sysinfo for AArch64 platforms. (Pranavkumar Sawargaonkar) - AArch64: Parse cputopology from /proc/cpuinfo. (Pranavkumar Sawargaonkar) - AArch64: CPU Support for AArch64 (ARMv8 64bit). (Pranavkumar Sawargaonkar) - AArch64: Add AArch64 architecture to list of valid arches. (Pranavkumar Sawargaonkar) - cpu: x86: Clean up error messages in x86VendorLoad() (Peter Krempa) - cpu: x86: Use whitespace to clarify context and use consistent labels (Peter Krempa) - cpu: x86: Fix function header formatting and whitespace (Peter Krempa) - cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (Peter Krempa) - cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (Peter Krempa) - cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (Jiri Denemark) - cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (Jiri Denemark) - cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (Jiri Denemark) - cpu: x86: Rename struct cpuX86Data as virCPUx86Data (Jiri Denemark) - cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (Jiri Denemark) - cpu: Add support for loading and storing CPU data (Jiri Denemark) - qemu: command: Fix macro indentation (Peter Krempa) - conf: Mark user provided strings in error messages when parsing XML (Peter Krempa) - schema: Rename option 'hypervtristate' to 'featurestate' (Peter Krempa) - fix typo in lxc_driver.c and virsh-nodedev.c (Hongwei Bi) - build: Add lxc testcase to dist list (Daniel Hansel) - cgroup: leave blkio cgroup value checking to kernel (Chen Hanxiao) - cgroup: show error when EINVAL is returned (Chen Hanxiao) - vbox: merge duplicate state conversions (Ryota Ozaki) - build: syntax check to avoid 'const fooPtr' (Eric Blake) - maint: avoid 'const fooPtr' in all remaining places (Eric Blake) - maint: avoid 'const fooPtr' in qemu (Eric Blake) - maint: avoid 'const fooPtr' in security (Eric Blake) - maint: avoid 'const fooPtr' in conf (Eric Blake) - maint: avoid 'const fooPtr' in domain_conf (Eric Blake) - maint: fix awkward typing of virDomainChrGetDomainPtrs (Eric Blake) - maint: avoid 'const fooPtr' in python bindings (Eric Blake) - maint: avoid 'const fooPtr' in tests (Eric Blake) - maint: avoid 'const fooPtr' in nwfilter files (Eric Blake) - maint: avoid 'const fooPtr' in cpu files (Eric Blake) - maint: avoid 'const fooPtr' in virnet files (Eric Blake) - maint: avoid 'const fooPtr' in several util files (Eric Blake) - maint: avoid 'const fooPtr' in hashes (Eric Blake) - maint: avoid 'const fooPtr' in public API (Eric Blake) - Improve log filtering in virLXCProcessReadLogOutputData (Daniel P. Berrange) - Ensure lxcContainerResolveSymlinks reports errors (Daniel P. Berrange) - Ensure lxcContainerMain reports errors on stderr (Daniel P. Berrange) - VMX: Serial devices don't have to be attached (Doug Goldstein) - Revert "VMX: Some serial ports are not actually connected" (Doug Goldstein) - qemu: snapshot: Add support for compressing external snapshot memory (Peter Krempa) - qemu: managedsave: Add support for compressing managed save images (Peter Krempa) - Improve error reporting with LXC controller (Daniel P. Berrange) - Make LXC controller use a private dbus connection & close it (Daniel P. Berrange) - Add a method for closing the dbus system bus connection (Daniel P. Berrange) - Allow use of a private dbus bus connection (Daniel P. Berrange) - VMware: Do version detection earlier (Doug Goldstein) - VMware: Simplify array walk for driver type (Doug Goldstein) - qemu: Include listenAddress in debug prints (Michal Privoznik) - Move virNetDevVPort enum impl into virnetdevvportprofile.c (Daniel P. Berrange) - qemu_conf: Introduce "migration_address" (Michal Privoznik) - qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (Michal Privoznik) - virsocket: Introduce virSocketAddrIsWildcard (Michal Privoznik) - Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (Michal Privoznik) - qemu: Introduce qemuDomainDefCheckABIStability (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONSendKey (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetVirtType (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetCPUInfo (Michal Privoznik) - qemumonitorjsontest: Extend the test for yet another monitor commands (Michal Privoznik) - qemu: Prefer VFIO for PCI device passthrough (Peter Krempa) - qemu: hostdev: Add checks if PCI passthrough is available in the host (Peter Krempa) - qemu: hostdev: Fix function spacing and header formatting (Peter Krempa) - qemu: refactor qemuCompressProgramAvailable() (Peter Krempa) - qemu: Fix coding style in qemuDomainSaveFlags() (Peter Krempa) - storage: Use bool instead of int (Ján Tomko) - tests: Add qemu test for multiple timers (Cole Robinson) - qemu: hostdev: Refactor PCI passhrough handling (Peter Krempa) - virerror: s/VIR_ERR_STORAGE_VOL_EXISTS/VIR_ERR_STORAGE_VOL_EXISTS/ (Michal Privoznik) - fix a ambiguous output of the command:'virsh vol-create-as' (Hongwei Bi) - build: add configure --without-readline (Eric Blake) - build: move readline check into its own macro (Eric Blake) - build: kill maintainer mode, always rebuild by default (Eric Blake) - Remove use of virConnectPtr from all remaining nwfilter code (Daniel P. Berrange) - Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (Daniel P. Berrange) - Remove virConnectPtr arg from virNWFilterDefParse* (Daniel P. Berrange) - qemu: Use maximum guest memory size when getting NUMA placement advice (Peter Krempa) - virfile: safezero: fall back to writing block by block if mmap fails (Oskari Saarenmaa) - test: snapshot: Add REDEFINE support (Cole Robinson) - qemu: snapshot: Break out redefine preparation to shared function (Cole Robinson) - test: Implement snapshot create/delete/revert APIs (Cole Robinson) - test: Allow specifying domainsnapshot XML (Cole Robinson) - qemu: snapshots: Simplify REDEFINE flag check (Cole Robinson) - qemucapabilitiesdata: Add qemu-1.6.50 data (Michal Privoznik) - qemucapabilitiesdata: Add qemu-1.6.0 data (Michal Privoznik) - qemucapabilitiesdata: Add qemu-1.4.2 data (Michal Privoznik) - qemucapabilitiesdata: Add qemu-1.3.1 data (Michal Privoznik) - qemucapabilitiesdata: Add qemu-1.2.2 data (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONSystemPowerdown (Michal Privoznik) - Use 'vnet' as prefix for veth devices (Daniel P. Berrange) - Retry veth device creation on failure (Daniel P. Berrange) - Avoid reporting an error if veth device is already deleted (Daniel P. Berrange) - Don't set netdev offline in container cleanup (Daniel P. Berrange) - qemumonitorjsontest: Test qemuMonitorJSONGetMigrationCapability (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetTargetArch (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONSetBlockIoThrottle (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetPtyPaths (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetSpiceMigrationStatus (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetMigrationStatus (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetMigrationCacheSize (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetBlockStatsInfo (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetBlockInfo (Michal Privoznik) - qemumonitorjsontest: Test qemuMonitorJSONGetBalloonInfo (Michal Privoznik) - qemu_hotplug: Allow QoS update in qemuDomainChangeNet (Michal Privoznik) - virNetDevBandwidthEqual: Make it more robust (Michal Privoznik) - test: Implement readonly snapshot APIs (Cole Robinson) - test: Wire up managed save APIs (Cole Robinson) - test: Allow specifying object transient state in driver XML (Cole Robinson) - tests: Introduce qemucapabilitiestest (Michal Privoznik) - qemuMonitorTest: Make check for monitor command match optional (Michal Privoznik) - tests: Learn qemuMonitorTestNew optional greeting (Michal Privoznik) - qemu_capabilities: Introduce virQEMUCapsInitQMPMonitor (Michal Privoznik) Cleanups: - xenapi: fix coding style in xenapi_driver.c (Hongwei Bi) - virsh: undocument --shareable (--mode already covers it) (Eric Blake) - Remove test case average timing (Daniel P. Berrange) - Remove existing OOM test impl (Daniel P. Berrange) Thanks everybody for everyone who helped for this release, be it for documentation, bug reports, patches, etc ... Enjoy ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

2 1