October 2026 - Devel - libvirt List Archives

[PATCH 0/7] Add hook support for session daemons
by Marc-André Lureau 07 Oct '26

07 Oct '26

Currently, libvirt hook scripts are only searched in the system-wide directory /etc/libvirt/hooks/, which is typically not accessible to non-root users running session daemons. This series adds support for user-level hook scripts located in $XDG_CONFIG_HOME/libvirt/hooks/ (typically ~/.config/libvirt/hooks/). When running as a non-root session daemon, hooks are searched in both the system directory (if accessible) and the user directory, with system hooks executed first. A new "skip_system_hooks" daemon configuration option allows session daemons to skip the system hooks directory entirely, using only user hooks. Plus a preliminary patch to enable b4 usage. --- Marc-André Lureau (7): Add .b4-config util: extract virHookCheckDir from virHookCheck util: handle EACCES when opening hook directories util: search hooks in both system and user directories util: add virHookSetSkipSystemHooks API remote: add skip_system_hooks daemon config option docs: document session hooks support .b4-config | 9 ++ NEWS.rst | 7 ++ docs/hooks.rst | 10 ++ src/libvirt_private.syms | 1 + src/remote/libvirtd.aug.in | 1 + src/remote/libvirtd.conf.in | 9 ++ src/remote/remote_daemon.c | 1 + src/remote/remote_daemon_config.c | 3 + src/remote/remote_daemon_config.h | 2 + src/remote/test_libvirtd.aug.in | 1 + src/util/virhook.c | 243 +++++++++++++++++++++++++++----------- src/util/virhook.h | 1 + 12 files changed, 218 insertions(+), 70 deletions(-) --- base-commit: 9ecbf2a65454704240170676b94b65866b352a34 change-id: 20261006-session-hook-b2fe660603f0 Best regards, -- Marc-André Lureau <marcandre.lureau(a)redhat.com>

1 7

[PATCH] qemuDomainRestoreInternal: Preserve error on cleanup path
by Peter Krempa 07 Oct '26

07 Oct '26

From: Peter Krempa <pkrempa(a)redhat.com> Preserve the error on cleanup path as cleanup of the 'libivrt_iohelper' process may overwrite it with an unactionable error, such as when attempting to restore a save image while the VM is already running: $ virsh list Id Name State -------------------------- 9 cd running $ virsh restore /tmp/cd.save error: Failed to restore domain from /tmp/cd.save error: internal error: Child process (LIBVIRT_LOG_OUTPUTS=1:stderr /home/pipo/build/libvirt/gcc/src/libvirt_iohelper /tmp/cd.save 0) unexpected fatal signal 13 After this patch the original error is reported: $ virsh restore /tmp/cd.save error: Failed to restore domain from /tmp/cd.save error: Requested operation is not valid: domain 'cd' is already active Signed-off-by: Peter Krempa <pkrempa(a)redhat.com> --- src/qemu/qemu_driver.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/qemu/qemu_driver.c b/src/qemu/qemu_driver.c index 61d95bfbbf..25ba6695bb 100644 --- a/src/qemu/qemu_driver.c +++ b/src/qemu/qemu_driver.c @@ -5985,6 +5985,7 @@ qemuDomainRestoreInternal(virQEMUDriver *driver, bool sparse = false; bool bypass_cache = (flags & VIR_DOMAIN_SAVE_BYPASS_CACHE) != 0; g_autoptr(qemuMigrationParams) restoreParams = NULL; + virErrorPtr save_err = NULL; virCheckFlags(QEMU_DOMAIN_RESTORE_FLAGS, -1); @@ -6109,6 +6110,7 @@ qemuDomainRestoreInternal(virQEMUDriver *driver, qemuProcessEndJob(vmNew); cleanup: + virErrorPreserveLast(&save_err); VIR_FORCE_CLOSE(fd); if (virFileWrapperFdClose(wrapperFd) < 0) ret = -1; @@ -6117,6 +6119,7 @@ qemuDomainRestoreInternal(virQEMUDriver *driver, if (vmNew && ret < 0) qemuDomainRemoveInactive(vmNew, 0, false); virDomainObjEndAPI(&vmNew); + virErrorRestore(&save_err); return ret; } -- 2.55.0

4 3

[PATCH] qemu: add support for postcopy-device migration state
by Denis V. Lunev 06 Oct '26

06 Oct '26

From: Denis V. Lunev <den(a)openvz.org> QEMU 10.2 added a postcopy-device migration state between active and postcopy-active. The source stays in it from the moment it has sent the device state until the destination confirms it has loaded it, and the destination is in it while loading. libvirt does not know the state: the MIGRATION event is dropped with a warning and query-migrate fails with unexpected migration status in postcopy-device so virDomainGetJobInfo and virDomainGetJobStats fail for that whole phase. OpenStack nova polls job stats during a live migration and aborts it on that error. Treat postcopy-device as part of the migrating phase. A failure in it still lets the source resume, which is what QEMU added the state for, so the source keeps waiting for postcopy-active before it reports post-copy. Signed-off-by: Denis V. Lunev <den(a)openvz.org> --- src/qemu/qemu_migration.c | 2 ++ src/qemu/qemu_monitor.c | 1 + src/qemu/qemu_monitor.h | 1 + src/qemu/qemu_monitor_json.c | 1 + src/qemu/qemu_process.c | 1 + tests/qemumonitorjsontest.c | 25 +++++++++++++++++++++++++ 6 files changed, 31 insertions(+) diff --git a/src/qemu/qemu_migration.c b/src/qemu/qemu_migration.c index 4a43ab83b0..797f83ca0d 100644 --- a/src/qemu/qemu_migration.c +++ b/src/qemu/qemu_migration.c @@ -2004,6 +2004,7 @@ qemuMigrationUpdateJobType(virDomainJobData *jobData) break; case QEMU_MONITOR_MIGRATION_STATUS_DEVICE: + case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE: jobData->status = VIR_DOMAIN_JOB_STATUS_MIGRATING; break; @@ -4895,6 +4896,7 @@ qemuMigrationSrcIsCanceled(virDomainObj *vm) qemuMonitorMigrationStatusTypeToString(status)); return true; + case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_RECOVER: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_RECOVER_SETUP: diff --git a/src/qemu/qemu_monitor.c b/src/qemu/qemu_monitor.c index 2c86cd1971..1216681ac5 100644 --- a/src/qemu/qemu_monitor.c +++ b/src/qemu/qemu_monitor.c @@ -148,6 +148,7 @@ VIR_ENUM_IMPL(qemuMonitorMigrationStatus, "active", "pre-switchover", "device", + "postcopy-device", "postcopy-active", "postcopy-paused", "postcopy-recover", diff --git a/src/qemu/qemu_monitor.h b/src/qemu/qemu_monitor.h index e9b6a25f0c..d69335a27d 100644 --- a/src/qemu/qemu_monitor.h +++ b/src/qemu/qemu_monitor.h @@ -995,6 +995,7 @@ typedef enum { QEMU_MONITOR_MIGRATION_STATUS_ACTIVE, QEMU_MONITOR_MIGRATION_STATUS_PRE_SWITCHOVER, QEMU_MONITOR_MIGRATION_STATUS_DEVICE, + QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE, QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY, QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_PAUSED, QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_RECOVER, diff --git a/src/qemu/qemu_monitor_json.c b/src/qemu/qemu_monitor_json.c index 8e88dc9442..29c42f7dd5 100644 --- a/src/qemu/qemu_monitor_json.c +++ b/src/qemu/qemu_monitor_json.c @@ -3286,6 +3286,7 @@ qemuMonitorJSONGetMigrationStatsReply(virJSONValue *reply, break; case QEMU_MONITOR_MIGRATION_STATUS_ACTIVE: + case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_PAUSED: case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_RECOVER: diff --git a/src/qemu/qemu_process.c b/src/qemu/qemu_process.c index 57a3ed3720..f99a4c3b37 100644 --- a/src/qemu/qemu_process.c +++ b/src/qemu/qemu_process.c @@ -1771,6 +1771,7 @@ qemuProcessHandleMigrationStatus(qemuMonitor *mon G_GNUC_UNUSED, case QEMU_MONITOR_MIGRATION_STATUS_ACTIVE: case QEMU_MONITOR_MIGRATION_STATUS_PRE_SWITCHOVER: case QEMU_MONITOR_MIGRATION_STATUS_DEVICE: + case QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE: case QEMU_MONITOR_MIGRATION_STATUS_ERROR: case QEMU_MONITOR_MIGRATION_STATUS_CANCELLING: case QEMU_MONITOR_MIGRATION_STATUS_CANCELLED: diff --git a/tests/qemumonitorjsontest.c b/tests/qemumonitorjsontest.c index a963029c69..a38d63c22c 100644 --- a/tests/qemumonitorjsontest.c +++ b/tests/qemumonitorjsontest.c @@ -1674,6 +1674,19 @@ testQemuMonitorJSONqemuMonitorJSONGetMigrationStats(const void *opaque) " \"error-desc\": \"It's broken\"" " }," " \"id\": \"libvirt-14\"" + "}") < 0 || + qemuMonitorTestAddItem(test, "query-migrate", + "{" + " \"return\": {" + " \"status\": \"postcopy-device\"," + " \"total-time\": 52," + " \"ram\": {" + " \"total\": 1611038720," + " \"remaining\": 0," + " \"transferred\": 1611038720" + " }" + " }," + " \"id\": \"libvirt-15\"" "}") < 0) return -1; @@ -1699,6 +1712,18 @@ testQemuMonitorJSONqemuMonitorJSONGetMigrationStats(const void *opaque) return -1; } + memset(&stats, 0, sizeof(stats)); + if (qemuMonitorJSONGetMigrationStats(qemuMonitorTestGetMonitor(test), + &stats, NULL) < 0) + return -1; + + if (stats.status != QEMU_MONITOR_MIGRATION_STATUS_POSTCOPY_DEVICE || + stats.ram_transferred != 1611038720) { + virReportError(VIR_ERR_INTERNAL_ERROR, "%s", + "Invalid postcopy-device migration statistics"); + return -1; + } + return 0; } base-commit: 215fab8ab1d912f6b25e60ab4d2ad59000f2eaff -- 2.53.0

2 1

[PATCH] apparmor: Add attach_disconnected flag to passt libvirt-qemu subprofile
by Stefano Brivio 05 Oct '26

05 Oct '26

With passt commit 7bf1595c9242 ("isolation: Don't create our userns as nobody"), instead of a direct unshare() to detach the isolating user namespace, we now have a two-step process where we join the namespace by opening its procfs entry. After detaching the isolated namespace, AppArmor considers its procfs entry a disconnected object, so we don't have a way to refer to it unless we use the attach_disconnected flag in the relevant profile. For stand-alone passt(1) usage, this is taken care of in passt commit 032f082ffad0 ("apparmor: Fixes for new user namespace detaching procedure"), but libvirt (as non-root) runs passt as a separate subprofile, and that's where we need to add that flag. Link: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149683 Signed-off-by: Stefano Brivio <sbrivio(a)redhat.com> --- src/security/apparmor/libvirt-qemu | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/security/apparmor/libvirt-qemu b/src/security/apparmor/libvirt-qemu index 9bf572692b..4c6e5689c8 100644 --- a/src/security/apparmor/libvirt-qemu +++ b/src/security/apparmor/libvirt-qemu @@ -209,7 +209,7 @@ # support for passt network back-end /usr/bin/passt Cx -> passt, - profile passt { + profile passt flags=(attach_disconnected) { /usr/bin/passt r, signal (receive) set=("term") peer=/usr/sbin/libvirtd, -- 2.43.0

2 1

[PATCH 0/2] qemucapabilitiestest: Add data for the qemu-11.2
by Peter Krempa 05 Oct '26

05 Oct '26

Peter Krempa (2): qemucapabilitiestest: Add data for the qemu-11.2 dev cycle (x86_64) qemucapabilitiestest: Add data for the qemu-11.2 dev cycle (aarch64) .../qemu_11.2.0-q35.x86_64-expanded.xml | 1858 + .../qemu_11.2.0-q35.x86_64-supported.xml | 1740 + .../domaincapsdata/qemu_11.2.0-q35.x86_64.xml | 1733 + .../domaincapsdata/qemu_11.2.0-tcg.x86_64.xml | 2856 + .../qemu_11.2.0-virt.aarch64.xml | 268 + tests/domaincapsdata/qemu_11.2.0.aarch64.xml | 268 + tests/domaincapsdata/qemu_11.2.0.x86_64.xml | 1731 + .../caps_11.2.0_aarch64.replies | 40208 +++++++++++++ .../caps_11.2.0_aarch64.xml | 552 + .../caps_11.2.0_x86_64.replies | 49897 ++++++++++++++++ .../caps_11.2.0_x86_64.xml | 5769 ++ ...host-model-fallback-kvm.x86_64-latest.args | 2 +- ...cpu-host-model-features.x86_64-latest.args | 2 +- .../cpu-host-model-kvm.x86_64-latest.args | 2 +- ...st-model-nofallback-kvm.x86_64-latest.args | 2 +- 15 files changed, 106884 insertions(+), 4 deletions(-) create mode 100644 tests/domaincapsdata/qemu_11.2.0-q35.x86_64-expanded.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0-q35.x86_64-supported.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0-q35.x86_64.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0-tcg.x86_64.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0-virt.aarch64.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0.aarch64.xml create mode 100644 tests/domaincapsdata/qemu_11.2.0.x86_64.xml create mode 100644 tests/qemucapabilitiesdata/caps_11.2.0_aarch64.replies create mode 100644 tests/qemucapabilitiesdata/caps_11.2.0_aarch64.xml create mode 100644 tests/qemucapabilitiesdata/caps_11.2.0_x86_64.replies create mode 100644 tests/qemucapabilitiesdata/caps_11.2.0_x86_64.xml -- 2.55.0

2 3

[PATCH] Remove rbd's auth_supported option
by Yusuke Fujimaki 04 Oct '26

04 Oct '26

Ceph removed auth_supported option in commit 350cc71d, https://github.com/ceph/ceph/commit/350cc71d7d9e9cd6239d24080082de7ac9bf8b70 auth_supported has long been an optional parameter, and has been replaced by auth_*_required. The error occurs because libvirt always uses the auth_supported option when authenticating to rbd storage.Therefore, remove the code that uses this option. Resolves: https://gitlab.com/libvirt/libvirt/-/work_items/918 Signed-off-by: Yusuke Fujimaki <usk.fujimaki(a)gmail.com> --- src/libxl/libxl_conf.c | 6 +----- src/libxl/xen_xl.c | 2 -- src/storage/storage_backend_rbd.c | 7 ------- tests/xlconfigdata/test-rbd-multihost-noauth.cfg | 2 +- 4 files changed, 2 insertions(+), 15 deletions(-) diff --git a/src/libxl/libxl_conf.c b/src/libxl/libxl_conf.c index 3bb5c1e591..184a143712 100644 --- a/src/libxl/libxl_conf.c +++ b/src/libxl/libxl_conf.c @@ -1087,11 +1087,7 @@ libxlMakeNetworkDiskSrcStr(virStorageSource *src, if (username) { virBufferEscape(&buf, '\\', ":", ":id=%s", username); - virBufferEscape(&buf, '\\', ":", - ":key=%s:auth_supported=cephx\\;none", - secret); - } else { - virBufferAddLit(&buf, ":auth_supported=none"); + virBufferEscape(&buf, '\\', ":", ":key=%s", secret); } if (src->nhosts > 0) { diff --git a/src/libxl/xen_xl.c b/src/libxl/xen_xl.c index d05972af5b..952dd73c1a 100644 --- a/src/libxl/xen_xl.c +++ b/src/libxl/xen_xl.c @@ -1478,8 +1478,6 @@ xenFormatXLDiskSrcNet(virStorageSource *src) virBufferStrcat(&buf, "rbd:", src->path, NULL); - virBufferAddLit(&buf, ":auth_supported=none"); - if (src->nhosts > 0) { virBufferAddLit(&buf, ":mon_host="); for (i = 0; i < src->nhosts; i++) { diff --git a/src/storage/storage_backend_rbd.c b/src/storage/storage_backend_rbd.c index 25cad4a28d..3981f81a79 100644 --- a/src/storage/storage_backend_rbd.c +++ b/src/storage/storage_backend_rbd.c @@ -239,10 +239,6 @@ virStorageBackendRBDOpenRADOSConn(virStorageBackendRBDState *ptr, if (rc < 0) goto cleanup; - - if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "cephx") < 0) - goto cleanup; } else { VIR_DEBUG("Not using cephx authorization"); if (rados_create(&ptr->cluster, NULL) < 0) { @@ -250,9 +246,6 @@ virStorageBackendRBDOpenRADOSConn(virStorageBackendRBDState *ptr, _("failed to create the RADOS cluster")); goto cleanup; } - if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "none") < 0) - goto cleanup; } VIR_DEBUG("Found %zu RADOS cluster monitors in the pool configuration", diff --git a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg b/tests/xlconfigdata/test-rbd-multihost-noauth.cfg index 5906865047..933e5af75a 100644 --- a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg +++ b/tests/xlconfigdata/test-rbd-multihost-noauth.cfg @@ -22,4 +22,4 @@ parallel = "none" serial = "none" builder = "hvm" boot = "d" -disk = [ "format=raw,vdev=hda,access=rw,backendtype=phy,target=/dev/HostVG/XenGuest2", "format=raw,vdev=hdb,access=rw,backendtype=qdisk,target=rbd:pool/image:auth_supported=none:mon_host=mon1.example.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] +disk = [ "format=raw,vdev=hda,access=rw,backendtype=phy,target=/dev/HostVG/XenGuest2", "format=raw,vdev=hdb,access=rw,backendtype=qdisk,target=rbd:pool/image:mon_host=mon1.example.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] -- 2.47.3

4 5

[PATCH] replace rbd option auth_supported with auth_*_required
by Janis Heims 03 Oct '26

03 Oct '26

As stated in Yusuke Fujimaki's patch, Ceph recently removed the deprecated auth_supported option that is still used by libvirt, causing errors when attempting to start a storage pool on a newer Ceph server: https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/RELD… https://github.com/ceph/ceph/commit/350cc71d7d9e9cd6239d24080082de7ac9bf8b70 This patch addresses the issue by replacing the deprecated option with all three new options (auth_cluster_required, auth_service_required and auth_client_required), as was previously done in Ceph. Resolves: https://gitlab.com/libvirt/libvirt/-/work_items/918 Signed-off-by: Janis Heims <janis.heims(a)undertheprinter.com> --- src/libxl/libxl_conf.c | 11 ++++++---- src/libxl/xen_xl.c | 4 +++- src/storage/storage_backend_rbd.c | 22 +++++++++++++++++-- .../test-rbd-multihost-noauth.cfg | 2 +- 4 files changed, 31 insertions(+), 8 deletions(-) diff --git a/src/libxl/libxl_conf.c b/src/libxl/libxl_conf.c index 3bb5c1e591..49f968a857 100644 --- a/src/libxl/libxl_conf.c +++ b/src/libxl/libxl_conf.c @@ -1087,11 +1087,14 @@ libxlMakeNetworkDiskSrcStr(virStorageSource *src, if (username) { virBufferEscape(&buf, '\\', ":", ":id=%s", username); - virBufferEscape(&buf, '\\', ":", - ":key=%s:auth_supported=cephx\\;none", - secret); + virBufferEscape(&buf, '\\', ":", ":key=%s", secret); + virBufferAddLit(&buf, ":auth_cluster_required=cephx"); + virBufferAddLit(&buf, ":auth_service_required=cephx"); + virBufferAddLit(&buf, ":auth_client_required=cephx\\;none"); } else { - virBufferAddLit(&buf, ":auth_supported=none"); + virBufferAddLit(&buf, ":auth_cluster_required=none"); + virBufferAddLit(&buf, ":auth_service_required=none"); + virBufferAddLit(&buf, ":auth_client_required=none"); } if (src->nhosts > 0) { diff --git a/src/libxl/xen_xl.c b/src/libxl/xen_xl.c index d05972af5b..c1ddc7c071 100644 --- a/src/libxl/xen_xl.c +++ b/src/libxl/xen_xl.c @@ -1478,7 +1478,9 @@ xenFormatXLDiskSrcNet(virStorageSource *src) virBufferStrcat(&buf, "rbd:", src->path, NULL); - virBufferAddLit(&buf, ":auth_supported=none"); + virBufferAddLit(&buf, ":auth_cluster_required=none"); + virBufferAddLit(&buf, ":auth_service_required=none"); + virBufferAddLit(&buf, ":auth_client_required=none"); if (src->nhosts > 0) { virBufferAddLit(&buf, ":mon_host="); diff --git a/src/storage/storage_backend_rbd.c b/src/storage/storage_backend_rbd.c index 25cad4a28d..33e644d981 100644 --- a/src/storage/storage_backend_rbd.c +++ b/src/storage/storage_backend_rbd.c @@ -241,17 +241,35 @@ virStorageBackendRBDOpenRADOSConn(virStorageBackendRBDState *ptr, goto cleanup; if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "cephx") < 0) + "auth_cluster_required", "cephx") < 0) + goto cleanup; + + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, + "auth_service_required", "cephx") < 0) + goto cleanup; + + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, + "auth_client_required", "cephx") < 0) goto cleanup; } else { VIR_DEBUG("Not using cephx authorization"); + if (rados_create(&ptr->cluster, NULL) < 0) { virReportError(VIR_ERR_INTERNAL_ERROR, "%s", _("failed to create the RADOS cluster")); goto cleanup; } + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, - "auth_supported", "none") < 0) + "auth_cluster_required", "none") < 0) + goto cleanup; + + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, + "auth_service_required", "none") < 0) + goto cleanup; + + if (virStorageBackendRBDRADOSConfSet(ptr->cluster, + "auth_client_required", "none") < 0) goto cleanup; } diff --git a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg b/tests/xlconfigdata/test-rbd-multihost-noauth.cfg index 5906865047..b149be077c 100644 --- a/tests/xlconfigdata/test-rbd-multihost-noauth.cfg +++ b/tests/xlconfigdata/test-rbd-multihost-noauth.cfg @@ -22,4 +22,4 @@ parallel = "none" serial = "none" builder = "hvm" boot = "d" -disk = [ "format=raw,vdev=hda,access=rw,backendtype=phy,target=/dev/HostVG/XenGuest2", "format=raw,vdev=hdb,access=rw,backendtype=qdisk,target=rbd:pool/image:auth_supported=none:mon_host=mon1.example.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] +disk = [ "format=raw,vdev=hda,access=rw,backendtype=phy,target=/dev/HostVG/XenGuest2", "format=raw,vdev=hdb,access=rw,backendtype=qdisk,target=rbd:pool/image:auth_cluster_required=none:auth_service_required=none:auth_client_required=none:mon_host=mon1.example.org\\:6321\\;mon2.example.org\\:6322\\;mon3.example.org\\:6322" ] base-commit: 215fab8ab1d912f6b25e60ab4d2ad59000f2eaff -- 2.54.0

1 0

Release of libvirt-12.8.0
by Jiri Denemark 01 Oct '26

01 Oct '26

The 12.8.0 release of both libvirt and libvirt-python is tagged and signed tarballs are available at https://download.libvirt.org/ https://download.libvirt.org/python/ Thanks everybody who helped with this release by sending patches, reviewing, testing, or providing feedback. Your work is greatly appreciated. * New features * resctrl: Support whole-process allocations and monitoring ``cachetune``, ``memorytune`` and ``energytune`` can now apply to the entire QEMU process. Monitors without a ``vcpus`` attribute inherit the enclosing scope. This enables whole-VM resctrl allocations and monitoring. * qemu: Add ``auto_dump_max_size`` to cap the size of auto-triggered dumps A guest that keeps crashing fills ``auto_dump_path`` one dump at a time. The new ``auto_dump_max_size`` setting in qemu.conf bounds the total size those dumps may occupy, pruning the oldest after each new one. It takes a byte count or a size such as ``"10GiB"``; 0, the default, keeps them all. * FreeBSD: support VLAN configuration on bridges libvirt on FreeBSD now supports VLAN configurations such as:: <vlan trunk='yes'> <tag id='42' nativeMode='untagged'/> <tag id='43'/> </vlan> It also supports ``macTableManager='libvirt'`` bridge configuration for networks (requires FreeBSD 15.0 or newer). * bhyve: implement ``virDomainSetLifecycleAction()`` API The bhyve driver now implements the ``virDomainSetLifecycleAction()`` API (accessible via ``virsh set-lifecycle-action``). * Improvements * qemu: Select the win-dmp format for Windows guest crash dumps Dumps triggered by ``<on_crash>`` and by watchdog handling used QEMU's elf default, which WinDbg cannot load. Where QEMU reports the format as available only to a guest that can use it, such dumps are now written in win-dmp format instead. * logging: ``max_size`` in virtlogd.conf accepts a unit suffix The setting now takes a size such as ``"2MiB"`` as well as a plain byte count. * Bug fixes * qemu: Fix resctrl monitor statistics reporting Statistics now use the correct monitor group names and omit nonexistent cache monitor data. * bhyve: fixes for transient/persistent domain handling and leftover TAP devices A few issues related to transient and persistent domain handling were fixed. Additionally, error handling bugs in the network interfaces management code were fixed so it does not leave dangling TAP interfaces on errors. Enjoy. Jirka

1 0