- Devel - libvirt List Archives

[libvirt] [PATCH] network: eliminate lag in updating dnsmasq hosts files
by Laine Stump 05 Aug '11

05 Aug '11

This addresses https://bugzilla.redhat.com/show_bug.cgi?id=713728 When "defining" a new network (or one that exists but isn't currently active) the new definition is stored in network->def, but for a network that already exists and is active, the new definition is stored in network->newDef, and then moved over to network->def as soon as the network is destroyed. However, the code that writes the dhcp and dns hosts files used by dnsmasq was always using network->def for its information, even when the new data was actually in network->newDef, so the hosts files always lagged one edit behind the definition. This patch changes the code to keep the pointer to the new definition after it's been assigned into the network, and use it directly (regardless of whether it's stored in network->newDef or network->def) to construct the hosts files. --- src/network/bridge_driver.c | 22 +++++++++++----------- 1 files changed, 11 insertions(+), 11 deletions(-) diff --git a/src/network/bridge_driver.c b/src/network/bridge_driver.c index c7d2dfd..c90db63 100644 --- a/src/network/bridge_driver.c +++ b/src/network/bridge_driver.c @@ -2338,6 +2338,7 @@ static virNetworkPtr networkDefine(virConnectPtr conn, const char *xml) { struct network_driver *driver = conn->networkPrivateData; virNetworkIpDefPtr ipdef, ipv4def = NULL; virNetworkDefPtr def; + bool freeDef = true; virNetworkObjPtr network = NULL; virNetworkPtr ret = NULL; int ii; @@ -2367,21 +2368,19 @@ static virNetworkPtr networkDefine(virConnectPtr conn, const char *xml) { if (!(network = virNetworkAssignDef(&driver->networks, def))) goto cleanup; - def = NULL; + freeDef = false; network->persistent = 1; - if (virNetworkSaveConfig(driver->networkConfigDir, - network->newDef ? network->newDef : network->def) < 0) { - virNetworkRemoveInactive(&driver->networks, - network); + if (virNetworkSaveConfig(driver->networkConfigDir, def) < 0) { + virNetworkRemoveInactive(&driver->networks, network); network = NULL; goto cleanup; } /* We only support dhcp on one IPv4 address per defined network */ for (ii = 0; - (ipdef = virNetworkDefGetIpByIndex(network->def, AF_UNSPEC, ii)); + (ipdef = virNetworkDefGetIpByIndex(def, AF_UNSPEC, ii)); ii++) { if (VIR_SOCKET_IS_FAMILY(&ipdef->address, AF_INET)) { if (ipdef->nranges || ipdef->nhosts) { @@ -2396,18 +2395,19 @@ static virNetworkPtr networkDefine(virConnectPtr conn, const char *xml) { } } if (ipv4def) { - dctx = dnsmasqContextNew(network->def->name, DNSMASQ_STATE_DIR); + dctx = dnsmasqContextNew(def->name, DNSMASQ_STATE_DIR); if (dctx == NULL || - networkBuildDnsmasqHostsfile(dctx, ipv4def, network->def->dns) < 0 || + networkBuildDnsmasqHostsfile(dctx, ipv4def, def->dns) < 0 || dnsmasqSave(dctx) < 0) goto cleanup; } - VIR_INFO("Defining network '%s'", network->def->name); - ret = virGetNetwork(conn, network->def->name, network->def->uuid); + VIR_INFO("Defining network '%s'", def->name); + ret = virGetNetwork(conn, def->name, def->uuid); cleanup: - virNetworkDefFree(def); + if (freeDef) + virNetworkDefFree(def); dnsmasqContextFree(dctx); if (network) virNetworkObjUnlock(network); -- 1.7.3.4

2 2

[libvirt] [PATCH] Don't mount /dev for application containers
by Daniel P. Berrange 05 Aug '11

05 Aug '11

From: "Daniel P. Berrange" <berrange(a)redhat.com> An application container shouldn't get a private /dev. Fix the regression from 6d37888e6a35a37e6faf7c0a1b1b4d9a5dee1285 * src/lxc/lxc_container.c: Don't mount /dev for app containers --- src/lxc/lxc_container.c | 34 ++++++++++++++++++++++------------ 1 files changed, 22 insertions(+), 12 deletions(-) diff --git a/src/lxc/lxc_container.c b/src/lxc/lxc_container.c index e73128d..cc72586 100644 --- a/src/lxc/lxc_container.c +++ b/src/lxc/lxc_container.c @@ -403,9 +403,10 @@ err: } -static int lxcContainerMountBasicFS(const char *srcprefix) +static int lxcContainerMountBasicFS(const char *srcprefix, bool pivotRoot) { const struct { + bool onlyPivotRoot; bool needPrefix; const char *src; const char *dst; @@ -419,20 +420,28 @@ static int lxcContainerMountBasicFS(const char *srcprefix) * mount point in the main OS becomes readonly too which si not what * we want. Hence some things have two entries here. */ - { false, "devfs", "/dev", "tmpfs", "mode=755", MS_NOSUID }, - { false, "proc", "/proc", "proc", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV }, - { false, "/proc/sys", "/proc/sys", NULL, NULL, MS_BIND }, - { false, "/proc/sys", "/proc/sys", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, - { true, "/sys", "/sys", NULL, NULL, MS_BIND }, - { true, "/sys", "/sys", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, - { true, "/selinux", "/selinux", NULL, NULL, MS_BIND }, - { true, "/selinux", "/selinux", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, + { true, false, "devfs", "/dev", "tmpfs", "mode=755", MS_NOSUID }, + { false, false, "proc", "/proc", "proc", NULL, MS_NOSUID|MS_NOEXEC|MS_NODEV }, + { false, false, "/proc/sys", "/proc/sys", NULL, NULL, MS_BIND }, + { false, false, "/proc/sys", "/proc/sys", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, + { false, true, "/sys", "/sys", NULL, NULL, MS_BIND }, + { false, true, "/sys", "/sys", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, + { false, true, "/selinux", "/selinux", NULL, NULL, MS_BIND }, + { false, true, "/selinux", "/selinux", NULL, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY }, }; int i, rc = -1; + VIR_DEBUG("Mounting basic filesystems %s pivotRoot=%d", NULLSTR(srcprefix), pivotRoot); + for (i = 0 ; i < ARRAY_CARDINALITY(mnts) ; i++) { char *src = NULL; const char *srcpath = NULL; + + VIR_DEBUG("Consider %s onlyPivotRoot=%d", + mnts[i].src, mnts[i].onlyPivotRoot); + if (mnts[i].onlyPivotRoot && !pivotRoot) + continue; + if (virFileMakePath(mnts[i].dst) < 0) { virReportSystemError(errno, _("Failed to mkdir %s"), @@ -455,6 +464,8 @@ static int lxcContainerMountBasicFS(const char *srcprefix) (access(srcpath, R_OK) < 0)) continue; + VIR_DEBUG("Mount %s on %s type=%s flags=%d, opts=%s", + srcpath, mnts[i].dst, mnts[i].type, mnts[i].mflags, mnts[i].opts); if (mount(srcpath, mnts[i].dst, mnts[i].type, mnts[i].mflags, mnts[i].opts) < 0) { VIR_FREE(src); virReportSystemError(errno, @@ -915,7 +926,7 @@ static int lxcContainerSetupPivotRoot(virDomainDefPtr vmDef, return -1; /* Mounts the core /proc, /sys, etc filesystems */ - if (lxcContainerMountBasicFS("/.oldroot") < 0) + if (lxcContainerMountBasicFS("/.oldroot", true) < 0) return -1; /* Mounts /dev and /dev/pts */ @@ -959,8 +970,7 @@ static int lxcContainerSetupExtraMounts(virDomainDefPtr vmDef) return -1; /* Mounts the core /proc, /sys, etc filesystems */ - VIR_DEBUG("Mounting basic FS"); - if (lxcContainerMountBasicFS(NULL) < 0) + if (lxcContainerMountBasicFS(NULL, false) < 0) return -1; VIR_DEBUG("Mounting completed"); -- 1.7.6

2 1

[libvirt] virNetClientPtr leak in remote driver
by Matthias Bolte 05 Aug '11

05 Aug '11

doRemoteClose doesn't free the virNetClientPtr and this creates a 260kb leak per remote connection. This happens because virNetClientFree doesn't remove the last ref, because virNetClientNew creates the virNetClientPtr with a refcount of 2. static virNetClientPtr virNetClientNew(virNetSocketPtr sock, const char *hostname) { [...] client->refs = 1; [...] /* Set up a callback to listen on the socket data */ client->refs++; if (virNetSocketAddIOCallback(client->sock, VIR_EVENT_HANDLE_READABLE, virNetClientIncomingEvent, client, virNetClientEventFree) < 0) { client->refs--; VIR_DEBUG("Failed to add event watch, disabling events"); } [...] } virNetClientNew adds a ref before calling virNetSocketAddIOCallback but only removes it when virNetSocketAddIOCallback fails. This seems wrong too me and the ref should be removed in the success case too. The same pattern was added in 0302391ee643ad91fdc6d2ecf7e4cf0fc9724516 (Fix race in ref counting when handling RPC jobs) --- a/src/rpc/virnetserverclient.c +++ b/src/rpc/virnetserverclient.c @@ -763,10 +763,12 @@ readmore: /* Send off to for normal dispatch to workers */ if (msg) { + client->refs++; if (!client->dispatchFunc || client->dispatchFunc(client, msg, client->dispatchOpaque) < 0) { virNetMessageFree(msg); client->wantClose = true; + client->refs--; return; } } Again, this seems wrong and the ref should be removed in the success case here too. Before I spent time to figure out how the refcounting is supposed to work here I just report it and hope that Dan can easily fix this. -- Matthias Bolte http://photron.blogspot.com

3 6

[libvirt] [PATCH] Fix typo in LXC cgroups setup error message
by Daniel P. Berrange 05 Aug '11

05 Aug '11

From: "Daniel P. Berrange" <berrange(a)redhat.com> * src/lxc/lxc_controller.c: s/PYT/PTY/ --- src/lxc/lxc_controller.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/lxc/lxc_controller.c b/src/lxc/lxc_controller.c index bc5ee25..8848ae2 100644 --- a/src/lxc/lxc_controller.c +++ b/src/lxc/lxc_controller.c @@ -209,7 +209,7 @@ static int lxcSetContainerResources(virDomainDefPtr def) VIR_CGROUP_DEVICE_RWM); if (rc != 0) { virReportSystemError(-rc, - _("Unable to allow PYT devices for domain %s"), + _("Unable to allow PTY devices for domain %s"), def->name); goto cleanup; } -- 1.7.6

2 1

[libvirt] [PATCH] rpc:fix sasl session relocking intead of unlocking it
by Guannan Ren 04 Aug '11

04 Aug '11

When to make use of any SASL authentication for TCP sockets by setting auth_tls = "sasl" in libvirtd.conf on server side,The client will hange because of the sasl session relocking other than dropping it in virNetSASLSessionExtKeySize() --- src/rpc/virnetsaslcontext.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/src/rpc/virnetsaslcontext.c b/src/rpc/virnetsaslcontext.c index ef36e2c..d4e7bf2 100644 --- a/src/rpc/virnetsaslcontext.c +++ b/src/rpc/virnetsaslcontext.c @@ -298,7 +298,7 @@ int virNetSASLSessionExtKeySize(virNetSASLSessionPtr sasl, ret = 0; cleanup: - virMutexLock(&sasl->lock); + virMutexUnlock(&sasl->lock); return ret; } -- 1.7.1

2 1

[libvirt] REG: JAVA API for physical host addition
by srivatsan jagannathan 04 Aug '11

04 Aug '11

Hi Team, I working on performance measurement of various cloud management software. I am working on code such that it will calculate (cpu usage, memory usage, disk io, time of operation & network bandwidth usage) for various cloud management operation. once such operation is adding 2 or 3 physical host and obtain the above measurement. Is there is any java api that support this function. what I need is for creating instance there is method Create() in class Domain, I need same operation for physical host. Regards, Srivatsan J.

1 0

[libvirt] ANNOUNCE: libvirt Perl bindings Sys::Virt 0.9.4 release
by Daniel P. Berrange 04 Aug '11

04 Aug '11

I am happy to announce a new release[1] of the libvirt Perl bindings, Sys::Virt 0.9.4 is available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-0.9.4.tar.gz Changes in this release - Add all new APIs in libvirt 0.9.4 - Requires libvirt >= 0.9.4 - Add missing VIR_DUMP_* and VIR_MIGRATE_* constants from previous releases The permanent link for the Sys::Virt package, where all historic releases can be found, is http://search.cpan.org/dist/Sys-Virt/ Thanks to everyone who contributed to this release through testing, bug reporting, patch submission, etc. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[libvirt] [PATCH v3] daemon: Unlink unix socket paths on shutdown
by Osier Yang 04 Aug '11

04 Aug '11

This patch introduces a internal RPC API "virNetServerClose", which is standalone with "virNetServerFree". it closes all the socket fds, and unlinks the unix socket paths, regardless of whether the socket is still referenced or not. This is to address regression bug: https://bugzilla.redhat.com/show_bug.cgi?id=725702 --- daemon/libvirtd.c | 1 + src/rpc/virnetserver.c | 16 ++++++++++++++++ src/rpc/virnetserver.h | 1 + src/rpc/virnetserverservice.c | 12 ++++++++++++ src/rpc/virnetserverservice.h | 2 ++ src/rpc/virnetsocket.c | 22 ++++++++++++++++++++++ src/rpc/virnetsocket.h | 1 + 7 files changed, 55 insertions(+), 0 deletions(-) diff --git a/daemon/libvirtd.c b/daemon/libvirtd.c index 9e044e2..53f1002 100644 --- a/daemon/libvirtd.c +++ b/daemon/libvirtd.c @@ -1558,6 +1558,7 @@ int main(int argc, char **argv) { cleanup: virNetServerProgramFree(remoteProgram); virNetServerProgramFree(qemuProgram); + virNetServerClose(srv); virNetServerFree(srv); if (statuswrite != -1) { if (ret != 0) { diff --git a/src/rpc/virnetserver.c b/src/rpc/virnetserver.c index 5e4826b..1a49dbb 100644 --- a/src/rpc/virnetserver.c +++ b/src/rpc/virnetserver.c @@ -798,3 +798,19 @@ void virNetServerFree(virNetServerPtr srv) virMutexDestroy(&srv->lock); VIR_FREE(srv); } + +void virNetServerClose(virNetServerPtr srv) +{ + int i; + + if (!srv) + return; + + virNetServerLock(srv); + + for (i = 0; i < srv->nservices; i++) { + virNetServerServiceClose(srv->services[i]); + } + + virNetServerUnlock(srv); +} diff --git a/src/rpc/virnetserver.h b/src/rpc/virnetserver.h index 810d8a3..324cfb7 100644 --- a/src/rpc/virnetserver.h +++ b/src/rpc/virnetserver.h @@ -85,5 +85,6 @@ void virNetServerQuit(virNetServerPtr srv); void virNetServerFree(virNetServerPtr srv); +void virNetServerClose(virNetServerPtr srv); #endif diff --git a/src/rpc/virnetserverservice.c b/src/rpc/virnetserverservice.c index d5648dc..8c9ed1e 100644 --- a/src/rpc/virnetserverservice.c +++ b/src/rpc/virnetserverservice.c @@ -280,3 +280,15 @@ void virNetServerServiceToggle(virNetServerServicePtr svc, VIR_EVENT_HANDLE_READABLE : 0); } + +void virNetServerServiceClose(virNetServerServicePtr svc) +{ + int i; + + if (!svc) + return; + + for (i = 0; i < svc->nsocks; i++) { + virNetSocketClose(svc->socks[i]); + } +} diff --git a/src/rpc/virnetserverservice.h b/src/rpc/virnetserverservice.h index 9357598..8540bd9 100644 --- a/src/rpc/virnetserverservice.h +++ b/src/rpc/virnetserverservice.h @@ -66,4 +66,6 @@ void virNetServerServiceFree(virNetServerServicePtr svc); void virNetServerServiceToggle(virNetServerServicePtr svc, bool enabled); +void virNetServerServiceClose(virNetServerServicePtr svc); + #endif diff --git a/src/rpc/virnetsocket.c b/src/rpc/virnetsocket.c index 41b691a..992e33a 100644 --- a/src/rpc/virnetsocket.c +++ b/src/rpc/virnetsocket.c @@ -1222,3 +1222,25 @@ void virNetSocketRemoveIOCallback(virNetSocketPtr sock) virMutexUnlock(&sock->lock); } + +void virNetSocketClose(virNetSocketPtr sock) +{ + if (!sock) + return; + + virMutexLock(&sock->lock); + + VIR_FORCE_CLOSE(sock->fd); + +#ifdef HAVE_SYS_UN_H + /* If a server socket, then unlink UNIX path */ + if (!sock->client && + sock->localAddr.data.sa.sa_family == AF_UNIX && + sock->localAddr.data.un.sun_path[0] != '\0') { + if (unlink(sock->localAddr.data.un.sun_path) == 0) + sock->localAddr.data.un.sun_path[0] = '\0'; + } +#endif + + virMutexUnlock(&sock->lock); +} diff --git a/src/rpc/virnetsocket.h b/src/rpc/virnetsocket.h index dfb3c5d..1e1c63c 100644 --- a/src/rpc/virnetsocket.h +++ b/src/rpc/virnetsocket.h @@ -118,6 +118,7 @@ void virNetSocketUpdateIOCallback(virNetSocketPtr sock, void virNetSocketRemoveIOCallback(virNetSocketPtr sock); +void virNetSocketClose(virNetSocketPtr sock); #endif /* __VIR_NET_SOCKET_H__ */ -- 1.7.6

3 4

[libvirt] speeding up qemu core dumps
by Jim Fehlig 04 Aug '11

04 Aug '11

Hi All, I've had user reports of "libvirt limiting KVM core dumps". This isn't quite true since libvirt just uses the default migration speed defined in qemu's migration.c /* Migration speed throttling */ static int64_t max_throttle = (32 << 20); AFAIK, there's not much interest in changing the qemu default http://lists.nongnu.org/archive/html/qemu-devel/2011-02/msg01156.html I thought there were more discussions on the topic but can only find the above thread ATM. Do folks here have objections to increasing the migration speed prior to core dump? If not, any suggestions for a value? I set the migration speed to 1G in doCoreDump() prior to calling qemuMigrationToFile() with following improvement dumping a 4G guest 32MiB/s migration speed (qemu default): # time virsh dump --live test /tmp/dump Domain test dumped to /tmp/dump real 0m10.121s user 0m0.004s sys 0m0.004s 1GiB/s migration speed: # time virsh dump --live test /tmp/dump Domain test dumped to /tmp/dump real 0m3.745s user 0m0.004s sys 0m0.004s I suppose the same applies for save. Regards, Jim

3 3

[libvirt] Release of libvirt-0.9.4
by Daniel Veillard 04 Aug '11

04 Aug '11

With an extra day of delay but allowing to pick all coverity checks related patches from Eric, the release is out, I hope it's solid :-) available as usual at: ftp://libvirt.org/libvirt/libvirt-0.9.4.tar.gz along with signed RPMs This is again a fairly big release with more than 400 commits included, both new API, improvement and a large amount of fixes: Features: - bandwidth QoS control (Michal Privoznik) - Add new API virDomainBlockPull* (Adam Litke) - save: new API to manipulate save file images (Eric Blake) - CPU bandwidth limits support (Wen Congyang) - allow to send NMI and key event to guests (Lai Jiangshan) - new API virDomainUndefineFlags (Osier Yang) - Implement code to attach to external QEMU instances. (Daniel P. Berrange) - various missing python binding (Hu Tao and Lai Jiangshan) - bios: Add support for SGA (Michal Privoznik) Documentation: - doc: fix confusing statement about required privileges (Eric Blake) - doc: fix incorrect option in blockjob (Alex Jia) - Correct the default value of lock_manager in qemu.conf (Guannan Ren) - libvirt.c: Update outdated description of flags (Michal Privoznik) - qemu: Improve docs for virsh dump format (Osier Yang) - qemu: improve thread documentation (Eric Blake) - doc: Add doc for blockpull and blockjob commands (Osier Yang) - Fix incorrect implication about list options (Dave Allan) - Fix typos in virsh.pod file (Daniel P. Berrange) - network: Fix typo (Osier Yang) - Break up 'Basic Resources' XML section (Cole Robinson) - driver.h: Fix two driver documentation mistakes (Wieland Hoffmann) - doc: Add documentation for new cputune elements period and quota (Wen Congyang) - doc: Correct documents for iface commands (Osier Yang) - improve virsh man page synopses (Eric Blake) - Fix spice documentation typo (Michal Privoznik) - document dxml argument to migrate2 (Eric Blake) - website: Point main page links to libvirt driver pages (Dave Allan) - maint: fix typos (Eric Blake) - mention EMOTIVE as a libvirt-using app (Eric Blake) - virsh: Update virsh man page (Supriya Kannery) - Fix virsh inject-nmi man page (KAMEZAWA Hiroyuki) - virsh: make destroy sound less scary (Eric Blake) - minor whitespace cleanups (Eric Blake) - Add documentation for the seclabel XML element (Daniel P. Berrange) Portability: - build: fix include path for cygwin (Eric Blake) - build: avoid non-portable shell in test setup (Eric Blake) - tests: Don't use bash if we don't have to (Matthias Bolte) - freebsd: Fix build problem due to picking up the wrong libvirt.h (Matthias Bolte) - freebsd: Avoid /bin/true in commandtest (Matthias Bolte) - freebsd: Add gnulib environ module for the commandtest (Matthias Bolte) - build: support warnings on RHEL 5 (Eric Blake) - Build: fix build if HAVE_AVAHI is not defined (Stefan Berger) - sysinfo: Don't try to run dmidecode on archs missing it (Michal Privoznik) - udev: Don't try to dump DMI on non-intel archs (Michal Privoznik) - Fix build when using polkit0 (Jim Fehlig) - Fix rpm build with sanlock and without QEmu (Daniel Veillard) - Skip some xen tests if xend is not running (Jim Fehlig) - build: fix virBufferVasprintf on mingw (Eric Blake) - Fix compilation of statstest.c during make check (Jim Fehlig) - Fix compilation error when SASL support is disabled (Jean-Baptiste Rouault) - tests: Disable networkxml2argvtest when configured without network (Matthias Bolte) Bug Fixes: - util: plug memory leak (Eric Blake) - rpc: avoid null deref (Eric Blake) - qemu: avoid memory leaks (Eric Blake) - qemu: plug child process leak on domain core dump (Eric Blake) - conf: avoid memory leak on disk operations (Eric Blake) - rpc: avoid crash on error (Eric Blake) - qemu: avoid null deref on block pull error (Eric Blake) - rpc: correctly process sasl whitelist globs (Eric Blake) - screenshot: don't unlink bogus file (Eric Blake) - python: avoid unlikely sign extension bug (Eric Blake) - rpc: avoid uninitialized memory use (Eric Blake) - rpc: avoid double close on error (Eric Blake) - qemu: Unlink temporary file on failure (Michal Privoznik) - rpc: avoid libvirtd crash on unexpected client close (Eric Blake) - virsh: fix memory leak in cmdNetworkInfo (Alex Jia) - openvz: detect when a domain was shut down from the inside (Jean-Baptiste Rouault) - qemu: fix crash when mixing sync and async monitor jobs (Eric Blake) - qemu: fix return value issue (Alex Jia) - qemu: fix return value issue in qemuDomainSetMemoryParameters (Alex Jia) - virsh: Fix vol-name and vol-pool commands (Matthias Bolte) - qemu: Fix a regression of domjobabort (Osier Yang) - conf: Don't leak the virtual port profile in virNetworkDefFree (Matthias Bolte) - network: don't forward DNS requests from isolated networks (Laine Stump) - virsh: avoid missing zero value judgement in cmdBlkiotune (Alex Jia) - qemu: fix nested job with driver lock held (Eric Blake) - qemu: Fix memory leak on metadata fetching (Michal Privoznik) - virsh: fix memory leak in cmdVolPath code (Alex Jia) - rpc: Fix memory leak in remoteDomainSet*Parameters functions (Matthias Bolte) - qemu: Recover from interrupted migration (Jiri Denemark) - python: Properly report errors if virStreamRecv fails (Cole Robinson) - Fix race in ref counting when handling RPC jobs (Daniel P. Berrange) - Fix build with gnutls 1.0.x branch (Daniel P. Berrange) - Add libtasn1-devel as a BuildRequires for libvirt.spec (Daniel P. Berrange) - Add mutex protection to SASL and TLS modules (Daniel P. Berrange) - Report error if unable to bind to any socket (Daniel P. Berrange) - Fix leak of mDNS object in virNetServer (Daniel P. Berrange) - Fix memory leaks in MDNS code (Daniel P. Berrange) - python: Handle embedded NUL in stream.send data (Cole Robinson) - Catch dnsmasq start failures (Guido Günther) - Fix import of private key with older gnutls (Daniel P. Berrange) - Fix TLS context tests with expired certs (Daniel P. Berrange) - Honour filesystem readonly flag & make special FS readonly (Daniel P. Berrange) - xenapi: Fix double-freeing the session in xenapiClose (Matthias Bolte) - remote: Fix forgotten comma (Michal Privoznik) - qemu: fix error message with migrate2 xml (Eric Blake) - command: avoid leaking fds across fork (Eric Blake) - error: preserve errno when saving last error (Eric Blake) - Fix uninitialized variable in QEMU CPU bandwidth code (Daniel P. Berrange) - fix make syntax-check error (Wen Congyang) - rpc: Pass through DISPLAY so ssh can launch askpass (Cole Robinson) - Don't try to close a NULL virNetClientPtr (Guannan Ren) - Honour key usage/purpose criticality flag (Daniel P. Berrange) - Fix reporting of errors for p2p migration (Daniel P. Berrange) - Use a virFreeCallback on virNetSocket to ensure safe release (Daniel P. Berrange) - Add mutex locking and reference counting to virNetSocket (Daniel P. Berrange) - util: avoid fds leak when virEventPollAddHandle fail (Alex Jia) - virsh: avoid double free of domain (Alex Jia) - build: Fix protocol-structs check in VPATH build (Jiri Denemark) - Fix now dead cleanup of VMs on libvirtd restart (Daniel P. Berrange) - qemu: Fix a regression of attaching device (Osier Yang) - storage: Avoid memory leak on metadata fetching (Michal Privoznik) - qemu: Don't overwrite errors by closefd in error paths (Jiri Denemark) - qemu: Save domain status ASAP after creating qemu process (Jiri Denemark) - util: Avoid duplicating virFileOpenAsNoFork in virFileOpenAs (Jiri Denemark) - virsh: fix missing prompt message for 'snapshot-delete' command (Nan Zhang) - Ensure signal handler propagates fatal signals to default handler (Daniel P. Berrange) - qemu: Fix monitor unlocking in some error paths (Jiri Denemark) - esx: Initialize all instances of esxVMX_Data to zero (Matthias Bolte) - qemu: avoid fd leak on core dump failure (Eric Blake) - domain_conf: Free temporary variable (Michal Privoznik) - esx: Fix a potential crash (Osier Yang) - remote: Fix memory leak (Alex Jia) - kill vm if saving config failed in v3 protocol (Wen Congyang) - Don't exit if the libvirtd config does not exist (Daniel P. Berrange) - Fix sending of reply to final RPC message (Daniel P. Berrange) - Fix leak of remote driver if final 'CLOSE' RPC call fails (Daniel P. Berrange) - Fix release of outgoing stream confirmation/abort message (Daniel P. Berrange) - Fix leak of 'msg' object in client stream code (Daniel P. Berrange) - Fix potential crash in libvirtd with active streams (Daniel P. Berrange) - Fix mistaken order of server cert/key parameters in constructor (Daniel P. Berrange) - util: Don't try to fchown files opened as non-root (Jiri Denemark) - qemu: Don't chown files on NFS share if dynamic_ownership is off (Michal Privoznik) - python: Fix bogus label placement (Matthias Bolte) - util: close the ioctl socket at the end of if(Get|Set)MacAddress (Laine Stump) - pci: initialize state values on reattach (Guannan Ren) - qemu: Fix virFileMakePath error handling in snapshot creation (Matthias Bolte) - storage: Do not override the exact error of createRawFile (Osier Yang) Improvements: - build: allow caching the input to STATIC_ANALYSIS (Eric Blake) - fdstream: drop delete argument (Eric Blake) - save: generate idempotent inactive xml for running domain (Eric Blake) - conf: make 'vnet' prefix a macro (Eric Blake) - utils: More useful error message for hook script failure (Osier Yang) - tests: Unify style of test skipping code (Matthias Bolte) - save: let qemu driver manipulate save files (Eric Blake) - save: support qemu modifying xml on domain save/restore (Eric Blake) - xen: make direct call when there is only one subdriver (Eric Blake) - xen: reduce callback special cases (Eric Blake) - xen: cleanup callback struct (Eric Blake) - libxl: fix build failure due to change in virDomainGraphicsDef (Laine Stump) - qemu: support type=network in domain graphics <listen> (Laine Stump) - conf: add <listen> subelement to domain <graphics> element (Laine Stump) - python: add python binding for virDomainSetMemoryParameters (Hu Tao) - python: add python binding for virDomainGetMemoryParameters (Hu Tao) - python: add python binding for virDomainSetBlkioParameters (Hu Tao) - python: add python binding for virDomainGetBlkioParameters (Hu Tao) - virsh: expose change-protection during migration (Eric Blake) - send-key: Implement Python API (Lai Jiangshan) - qemu: Remove special case for virDomainAbortJob (Jiri Denemark) - qemu: Remove special case for virDomainSuspend (Jiri Denemark) - qemu: Remove special case for virDomainMigrateSetMaxDowntime (Jiri Denemark) - qemu: Remove special case for virDomainMigrateSetMaxSpeed (Jiri Denemark) - qemu: Remove special case for virDomainBlockStats (Jiri Denemark) - qemu: Remove special case for virDomainGetBlockInfo (Jiri Denemark) - qemu: Migration job on source daemon (Jiri Denemark) - qemu: Migration job on destination daemon (Jiri Denemark) - qemu: Implement migration job phases (Jiri Denemark) - bandwidth: Integrate bandwidth into portgroups (Michal Privoznik) - tools: format percent strings of nodecpustats (Alex Jia) - set cpu bandwidth for the vm (Wen Congyang) - virsh: use faster bit search (Eric Blake) - virsh: make vcpucount use --current consistently (Eric Blake) - vcpu: teach getVcpusFlags about current (Eric Blake) - util: change virFile*Pid functions to return < 0 on failure (Laine Stump) - rename cfs_* to vcpu_* (Wen Congyang) - python: add Python binding for virDomainGetVcpuPinInfo API (Taku Izumi) - python: add Python binding for virDomainPinVcpusFlags API (Taku Izumi) - python: add Python binding for virDomainGetSchedulerParametersFlags API (Taku Izumi) - python: add Python binding for virDomainGetSchedulerParametersFlags API (Taku Izumi) - tests: detect gnutls errors (Eric Blake) - bandwidth: Add domain schema and xml2xml tests (Michal Privoznik) - bandwidth: Add test cases for network (Michal Privoznik) - bandwidth: Implement functions to enable and disable QoS (Michal Privoznik) - bandwidth: Create format functions (Michal Privoznik) - bandwidth: Add parsing and free functions (Michal Privoznik) - bandwidth: Declare internal structures (Michal Privoznik) - bandwidth: Define schema and create documentation (Michal Privoznik) - network: provide internal API to return IP of a network (Laine Stump) - util: add an ifaceGetIPAddress to the interface utilities (Laine Stump) - Pre-create /var/lib/libvirt/sanlock directory (Daniel P. Berrange) - Refactor mounting of special filesystems (Daniel P. Berrange) - Pull code for doing a bind mount into separate method (Daniel P. Berrange) - Fix typos in daemon config file from previous commit (Daniel P. Berrange) - Add a test case for certificate validation (Daniel P. Berrange) - Allow certificate sanity checking to be disabled (Daniel P. Berrange) - remote/ssh: optional "keyfile" parameter. (Oskari Saarenmaa) - util: make interface.c functions consistently return < 0 on error (Laine Stump) - Refactor the certification validation code (Daniel P. Berrange) - Remove call to deprecated gnutls_certificate_type_set_priority (again) (Daniel P. Berrange) - Ensure that libvirtd shuts down if initialization fails (Daniel P. Berrange) - Asynchronous event for BlockJob completion (Adam Litke) - Enable virDomainBlockPull in the python API (Adam Litke) - Enable the virDomainBlockPull API in virsh (Adam Litke) - Implement virDomainBlockPull for the qemu driver (Adam Litke) - Add virDomainBlockPull support to the remote driver (Adam Litke) - virDomainBlockPull: Implement the main entry points (Adam Litke) - save: add virsh commands for manipulating save files (Eric Blake) - save: wire up remote protocol (Eric Blake) - save: support bypass-cache flag in libvirt-guests init script (Eric Blake) - save: support bypass-cache flag in qemu.conf (Eric Blake) - save: support BYPASS_CACHE during qemu save/restore (Eric Blake) - save: add virFileDirectFd wrapper type (Eric Blake) - save: let iohelper work on O_DIRECT fds (Eric Blake) - save: let iohelper handle inherited fd (Eric Blake) - save: support --xml to virsh save/restore (Eric Blake) - save: add --bypass-cache flag to virsh save/restore operations (Eric Blake) - save: wire up trivial save/restore flags implementations (Eric Blake) - error: add new error type for reflecting partial API support (Eric Blake) - network: internal API functions to manage assignment of physdev to guest (Laine Stump) - qemu: use virDomainNetGetActual*() in qemuDomainXMLToNative (Laine Stump) - qemu: use virDomainNetGetActual*() functions where appropriate (Laine Stump) - network: separate Start/Shutdown functions for new network types (Laine Stump) - conf: support abstracted interface info in network XML (Laine Stump) - conf: support abstracted interface info in domain interface XML (Laine Stump) - conf: virDomainNetDef points to (rather than contains) virtPortProfile (Laine Stump) - conf: put virtPortProfile struct / functions in a common location (Laine Stump) - destroy: Implement internal API for xenapi driver (Michal Privoznik) - destroy: Implement internal API for xen driver (Michal Privoznik) - destroy: Implement internal API for vmware driver (Michal Privoznik) - destroy: Implement internal API for vbox driver (Michal Privoznik) - destroy: Implement internal API for uml driver (Michal Privoznik) - destroy: Implement internal API for phyp driver (Michal Privoznik) - destroy: Implement internal API for openvz driver (Michal Privoznik) - destroy: Implement internal API for lxc driver (Michal Privoznik) - destroy: Implement internal API for libxl driver (Michal Privoznik) - destroy: Implement internal API for ESX driver (Michal Privoznik) - destroy: Implement internal API for qemu driver (Michal Privoznik) - destroy: Wire up the remote protocol (Michal Privoznik) - destroy: Define new public API virDomainDestroyFlags (Michal Privoznik) - save: wire up remote protocol (Eric Blake) - save: new public API to bypass file system cache on save/restore (Eric Blake) - build: rename files.h to virfile.h (Eric Blake) - command: move all docs into .c file (Eric Blake) - rpc: Make the dispatch generator handle 'void name(void)' style procedures (Matthias Bolte) - python: Fix makefile rule for code generation (Matthias Bolte) - qemu: Implement cfs_period and cfs_quota's modification (Wen Congyang) - qemu: Implement period and quota tunable XML configuration and parsing (Wen Congyang) - Update XML Schema for new entries (Wen Congyang) - cgroup: Implement cpu.cfs_period_us and cpu.cfs_quota_us tuning API (Wen Congyang) - Introduce the function virCgroupForVcpu (Wen Congyang) - qemu: send-key: Implement the driver methods (Lai Jiangshan) - send-key: Expose the new API in virsh (Lai Jiangshan) - util: add virtkeycode module (Lai Jiangshan) - util: Add keymaps.csv (Lai Jiangshan) - Fix checking of key usage/purpose data (Daniel P. Berrange) - Fix mixed up error messages when reporting TLS certificate problems (Daniel P. Berrange) - undefine: Extend virsh undefine to support the new flag (Osier Yang) - undefine: Implement undefineFlags for all other drivers (Osier Yang) - undefine: Implement internal API for libxl driver (Osier Yang) - undefine: Implement internal API for qemu driver (Osier Yang) - undefine: Wire up the remote protocol (Osier Yang) - undefine: Define the new API (Osier Yang) - Add sanity checking of basic constraints, key purpose & key usage (Daniel P. Berrange) - Add some basic sanity checking of certificates before use (Daniel P. Berrange) - Add an explicit virNetClientClose method (Daniel P. Berrange) - Add some debugging for virNetClient reference counting (Daniel P. Berrange) - build: detect doc generation failure (Eric Blake) - Unregister event callback if a fatal error occurs during dispatch (Daniel P. Berrange) - Quieten build & ensure API build scripts exit with non-zero status (Daniel P. Berrange) - virsh: Extend virsh dominfo to display if managed save image exists (Osier Yang) - libvirt: do not mix internal flags into public API (Eric Blake) - rpc: Fix typos in rpc generator scripts (Osier Yang) - build: also track RPC on-wire enum values (Eric Blake) - build: add syntax check for proper flags use (Eric Blake) - xen: reject unknown flags (Eric Blake) - esx: reject unknown flags (Eric Blake) - virsh: improve option handling (Eric Blake) - flags: fix domain_conf migration regression (Eric Blake) - flags: fix qemu migration regression (Eric Blake) - flags: use common dumpxml flags check (Eric Blake) - add --cache, --serial, --shareable and --address to attach-disk (Hu Tao) - Fix error message for missing TLS write function (Daniel P. Berrange) - Fix reporting of cert validation failures (Daniel P. Berrange) - Fix error code for storage operations (Dave Allan) - setvcpus: add "--current" option to "virsh setvcpus" (Taku Izumi) - setvcpus: extend qemuDomainSetVcpusFlags() to support current flag (Taku Izumi) - setvcpus: extend virDomainSetVcpusFlags API to support current flag (Taku Izumi) - Add domain events support to UML driver (Daniel P. Berrange) - virnetsocket: use new API for uniform child cleanup (Eric Blake) - fdstream: avoid child process leak on error (Eric Blake) - command: introduce virPidWait, virPidAbort (Eric Blake) - update apparmor security driver for new udev paths (Jamie Strandboge) - xenapi: Improve error reporting in xenapiOpen (Matthias Bolte) - build: fix VPATH build of todo (Eric Blake) - build: check for virnetprotocol on-the-wire stability (Eric Blake) - build: disable some drivers when building without libvirt daemon (Wen Congyang) - build: avoid ATTRIBUTE_UNUSED in headers (Eric Blake) - remote: prefer unsigned flags (Eric Blake) - conf: delete unused flags arguments (Eric Blake) - virsh: fix previous patch (Jiri Denemark) - virsh: Make "DEBUG" loglevel the superset (Supriya Kannery) - virsh: Avoid using magic numbers for logging (Supriya Kannery) - build: don't hand-roll cloexec code (Eric Blake) - conf: prefer unsigned flags (Eric Blake) - python: prefer unsigned flags (Eric Blake) - node_device: avoid implicit int (Eric Blake) - virsh, daemon: prefer unsigned flags (Eric Blake) - xenapi: reject unknown flags (Eric Blake) - vmware: reject unknown flags (Eric Blake) - vbox: reject unknown flags (Eric Blake) - uml: reject unknown flags (Eric Blake) - test: reject unknown flags (Eric Blake) - qemu: reject unknown flags (Eric Blake) - phyp: reject unknown flags (Eric Blake) - openvz: reject unknown flags (Eric Blake) - lxc: reject unknown flags (Eric Blake) - libxl: reject unknown flags (Eric Blake) - qemu: build failed due to unused variables (Peter Krempa) - storage: reject unknown flags (Eric Blake) - node_device: reject unknown flags (Eric Blake) - util: reject unknown flags, and prefer unsigned flags (Eric Blake) - libvirt-qemu: use unsigned flags (Eric Blake) - maint: print flags in hex during debug (Eric Blake) - maint: exclude more files from syntax check (Eric Blake) - util: honor anchored names when searching for executables (Eric Blake) - Remove unused virNetServerProgramErrorHander typedef (Daniel P. Berrange) - qemu: Consolidate qemuMigrationPrepare{Direct,Tunnel} (Jiri Denemark) - qemu: Add support for job phase (Jiri Denemark) - qemu: Recover from interrupted jobs (Jiri Denemark) - qemu: Save job type in domain status XML (Jiri Denemark) - qemu: Allow all query commands to be run during long jobs (Jiri Denemark) - qemu: Consolidate {Enter,Exit}Monitor{,WithDriver} (Jiri Denemark) - qemu: Consolidate BeginJob{,WithDriver} into a single method (Jiri Denemark) - qemu: Separate job related data into a new object (Jiri Denemark) - maint: avoid incremental 'make syntax-check' failure (Eric Blake) - Skip bugs which are CLOSED in todo list (Daniel P. Berrange) - Add missing cleanup for transient guests in UML driver (Daniel P. Berrange) - Add auditing to the UML driver (Daniel P. Berrange) - Add auditing to the LXC driver (Daniel P. Berrange) - Add virtualization type in audit messages (Daniel P. Berrange) - Add auditing of filesystems (Daniel P. Berrange) - Move qemu_audit.h helpers into shared code (Daniel P. Berrange) - rpc: Fix compile error due to potentially unused parameter (Matthias Bolte) - Add monitor API for checking whether KVM is enabled (Daniel P. Berrange) - Add a method for extracting QEMU argv from /proc (Daniel P. Berrange) - Change extract pidfile & monitor config from QEMU command line (Daniel P. Berrange) - Keep pidfile path in qemuDomainObjPrivate struct (Daniel P. Berrange) - Add a new 'virsh qemu-attach' command. (Daniel P. Berrange) - Define remote wire protocol & impls for virDomainQemuAttach (Daniel P. Berrange) - Define a QEMU specific API to attach to a running QEMU process (Daniel P. Berrange) - qemu: update configuration file (Alex Jia) - maint: rename virtaudit to match file contents (Eric Blake) - remote/ssh: support for no_verify. (Oskari Saarenmaa) - build: also check qemu_protocol for on-the-wire stability (Eric Blake) - build: avoid requiring -lm (Eric Blake) - Remove code no longer used after commit df0b57a9 (Jim Fehlig) - Add domain type checking (Matthias Bolte) - tests: simplify formatting (Eric Blake) - Do not drop kernel cmdline for xen pv domains (Jim Fehlig) - RPC: fix argument's name (Wen Congyang) - fix typo error (Wen Congyang) - vbox: Fix logic in storage driver open function (Matthias Bolte) - tests: Improve output of tests that decide to skip at runtime (Matthias Bolte) - tests: Fix compressed test output padding logic (Matthias Bolte) - tests: Use EXIT_AM_SKIP instead of 77 directly (Matthias Bolte) - rpc: Fix whitespace problem in generated code (Matthias Bolte) - sanlock: avoid lockspace setup when auto_disk_lease is off (Federico Simoncelli) - libvirtd: diagnose explicitly requested but missing conf file (Eric Blake) - qemu: clean up OOM checks (Michael Santos) - graphics: add support for action_if_connected in qemu (Michal Privoznik) - microblaze: Add architecture support (John Williams) - util: drop unused safezero argument (Eric Blake) - conf: prefer unsigned int for flags (Eric Blake) - drivers: prefer unsigned int for flags (Eric Blake) - public API: prefer unsigned int for flags (Eric Blake) - maint: print flags in hex during debug (Eric Blake) - build: use gnulib pthread_sigmask (Eric Blake) - util: rename err_exit to cleanup in interface.c (Laine Stump) - sysinfo: delete unnecessary white space of sysinfo. (Minoru Usui) - util: add virTrimSpaces (Eric Blake) - util: fix virSkipSpaces (Eric Blake) - Reduce code duplication in virFileMakePath(Helper) (Matthias Bolte) - apparmor: Finish incomplete renaming of relabel to norelabel (Matthias Bolte) - Fix default value of security label 'relabel' attribute (Daniel P. Berrange) - Fix return value semantic of virFileMakePath (Matthias Bolte) - nodedev: Let check_fc_host_linux report errors to the caller (Matthias Bolte) - xml: create an RNG file for common types and move some definitions there (Laine Stump) - docs: sort the file list in the schemas Makefile (Laine Stump) - qemu: check flags in qemuDomainGetXMLDesc (Laine Stump) - conf: fix domain parse flags (Laine Stump) - conf: Fix declaration of virNetworkDNS(Hosts)Def struct (Matthias Bolte) - Allow for resource relabelling with static labels (Daniel P. Berrange) - Allow a base label to be specified in dynamic labelling mode (Daniel P. Berrange) Cleanups: - qemu: silence coverity false positives (Eric Blake) - interface: drop dead code (Eric Blake) - rpc: silence coverity false positives (Eric Blake) - build: silence coverity false positives (Eric Blake) - qemu: remove dead code (Eric Blake) - maint: add missing copyright notices (Eric Blake) - xen: drop unused callbacks (Eric Blake) - build: avoid type-punning compiler warning (Eric Blake) - tests: fix compilation failures (Eric Blake) - build: Use $(PYTHON) instead of python for the keycode map generator (Matthias Bolte) - build: fix bugs with destroyFlags patches (Eric Blake) - util: define MAX (Laine Stump) - maint: fix typos on guaranteed (Eric Blake) - build: fix broken build (Eric Blake) - maint: fix spelling of Red Hat (Eric Blake) - tests: Fix virshtest failure after dominfo changed (Osier Yang) Thanks everybody for the work done for this release, be it documentation, ideas, patches or bug reports ! Daniel -- Daniel Veillard | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ daniel(a)veillard.com | Rpmfind RPM search engine http://rpmfind.net/ http://veillard.com/ | virtualization library http://libvirt.org/

3 2