- Devel - libvirt List Archives

[PATCH 0/3] Fix VMX-* feature detection from MSR
by Hector Cao 01 Dec '25

01 Dec '25

Currently, libvirt is unable to detect the CPU model of recent Intel CPUs (like Granite Rapids) with VMX-* features specified in the MSRs (Model Specific Registers). This is due to the wrong parsing of these VMX-* features from the MSR values. This series of 3 commits allow to fix the MSR VMX-* feature detection. This has been tested successfully on a platform equipped with Intel Granite Rapids CPU. Hector Cao (3): cpu_map: fix sync script to extract correctly vmx-* features cpu_map: update vmx-* features cputest : fix test failures due to VMX-* feature update src/cpu_map/sync_qemu_features_i386.py | 19 +++ src/cpu_map/x86_features.xml | 136 +++++++++--------- .../x86_64-cpuid-Atom-P5362-2-enabled.xml | 10 +- .../x86_64-cpuid-Atom-P5362-enabled.xml | 10 +- .../x86_64-cpuid-Cooperlake-enabled.xml | 10 +- .../x86_64-cpuid-Core-i7-1270P-enabled.xml | 10 +- .../x86_64-cpuid-Core-i7-1365U-enabled.xml | 10 +- .../x86_64-cpuid-Core-i7-8550U-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-6731E-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-6788P-disabled.xml | 1 + .../x86_64-cpuid-Xeon-6788P-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-6788P-guest.xml | 17 ++- .../x86_64-cpuid-Xeon-6788P-host.xml | 17 ++- ...x86_64-cpuid-Xeon-Bronze-3408U-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-E3-1270-v5-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-Gold-6152-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-Gold-6530-enabled.xml | 10 +- ...86_64-cpuid-Xeon-Platinum-9242-enabled.xml | 10 +- ...x86_64-cpuid-Xeon-Silver-4214R-enabled.xml | 10 +- .../x86_64-cpuid-Xeon-w7-3465X-enabled.xml | 10 +- 20 files changed, 181 insertions(+), 159 deletions(-) -- 2.45.2

3 8

[PATCH] spec: Fix RPM build when %{fedora} is undefined
by Jiri Denemark 01 Dec '25

01 Dec '25

From: Jiri Denemark <jdenemar(a)redhat.com> Signed-off-by: Jiri Denemark <jdenemar(a)redhat.com> --- Pushed as trivial build breaker. libvirt.spec.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libvirt.spec.in b/libvirt.spec.in index 8b3bc9884f..ccfe75135b 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -41,7 +41,7 @@ %define with_qemu 0%{!?_without_qemu:1} %else # QEMU drops 32-bit in Fedora 44 - %if %{?fedora} > 43 + %if 0%{?fedora} > 43 %define with_qemu 0 %else %define with_qemu 0%{!?_without_qemu:1} -- 2.51.1

1 0

Release of libvirt-11.10.0
by Jiri Denemark 01 Dec '25

01 Dec '25

The 11.10.0 release of both libvirt and libvirt-python is tagged and signed tarballs are available at https://download.libvirt.org/ https://download.libvirt.org/python/ Thanks everybody who helped with this release by sending patches, reviewing, testing, or providing feedback. Your work is greatly appreciated. * Security * CVE-2025-12748: Denial of service by some ACL-limited accounts Parsing of user provided XMLs in APIs which needed the identification information from those XML definitions was done in full before ACL checks were performed. Some valid, but useless, definitions could cause allocation of too much memory, leading to denial of service. APIs which do equate to full root access (such as ``domain:write``), and were parsing XML definitions in full before performing ACL checks could, potentially, be exploited in a way that would allow users (which were about to be denied the API call) to cause aforementioned overallocation even before the ACL checks were performed. A change was made so that parsing before ACL checks are done only for the identification parts of the XML definition (which is needed to perform the checks) and full parsing is done only after checking all ACLs. * CVE-2025-13193: Incorrect permissions on images after external snapshot of an inactive VM The overlay ``qcow2`` images which are created as part of creation of an external snapshot of an inactive VM had world-readable (644) permissions which would allow unauthorized users to see contents of blocks written by the VM after snapshot was taken. Libvirt now sets proper umask so that the images are created with 600 mode. * New features * Hyper-V virttype support for Qemu domains Libvirt now supports Hyper-V virttype while lauching QEMU domains. This feature requires Qemu version 10.2.0 or later and is available on Linux hosts where the /dev/mshv is present. * Add more statistics for block devices on QEMU domains The block devices now report optimal access request sizes as well as statistics such as the queue depth. * Improvements * bhyve: VNC ``wait`` attribute support Bhyve guests can now be configured to wait for a VNC connection before booting. * remote: multiple certificate support The remote daemon and client can be configured to load multiple x509 certificate identities. This facilitates a transition to certificates supporting Post-Quantum Crytographic algorithms. * tools: improved virt-host-validate output The virt-host-validate tool will now report extra details when certain checks pass. * qemu: Allow backup jobs to continue if guest OS shuts down When starting a backup job users can now use a flag which prevents the VM to be completely cleaned up if the guest OS shuts down while the backup is running so that the backup can be finalized. * Bug fixes * ch: Use correct domain definition in chDomainGetXMLDesc() Cloud-Hypervisor driver claims to support ``VIR_DOMAIN_XML_INACTIVE`` but in fact it never formatted the inactive XML. This is now fixed. * esx: Allow disk images in subdirectories If a domain has a disk image that's not in a datastore path but in a subdirectory, the ESX driver would have failed to parse that and an error was reported when obtaining domain XML. This is now fixed. * qemu: Fix incoming migration to QEMU 10.0.0 and newer Due to a change in the way QEMU 10.0.0 reports the state of "ht" CPU feature, incoming migration of a domain with multiple CPU threads would fail with "guest CPU doesn't match specification: extra features: ht" error. * qemu: fix incorrect reporting of the TDX launch security type The TDX launch security type was incorrectly reported on all platforms if the QEMU binary had it built-in. It is now limited to only platforms with the TDX kernel feature available for use. * qemu: set ``detect_zeroes`` for all backing chain layers Some block jobs (snapshots, block commit) could modify the backing chain in a way where ``detect_zeroes`` would no longer be honoured. We now set it for all images in the backing chain, so that it will behave correctly even after those operations. Enjoy. Jirka

1 0

[PATCH] NEWS: Mention CVE-2025-13193 and improvements for block stats/config and backups
by Peter Krempa 28 Nov '25

28 Nov '25

From: Peter Krempa <pkrempa(a)redhat.com> Signed-off-by: Peter Krempa <pkrempa(a)redhat.com> --- NEWS.rst | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 879e9e8448..91ed53ba7e 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -29,6 +29,14 @@ v11.10.0 (unreleased) identification parts of the XML definition (which is needed to perform the checks) and full parsing is done only after checking all ACLs. + * CVE-2025-13193: Incorrect permissions on images after external snapshot of an inactive VM + + The overlay ``qcow2`` images which are created as part of creation of an + external snapshot of an inactive VM had world-readable (644) permissions + which would allow unauthorized users to see contents of blocks written by + the VM after snapshot was taken. Libvirt now sets proper umask so that + the images are created with 600 mode. + * **Removed features** * **New features** @@ -39,6 +47,11 @@ v11.10.0 (unreleased) feature requires Qemu version 10.2.0 or later and is available on Linux hosts where the /dev/mshv is present. + * Add more statistics for block devices on QEMU domains + + The block devices now report optimal access request sizes as well as + statistics such as the queue depth. + * **Improvements** * bhyve: VNC ``wait`` attribute support @@ -57,6 +70,12 @@ v11.10.0 (unreleased) The virt-host-validate tool will now report extra details when certain checks pass. + * qemu: Allow backup jobs to continue if guest OS shuts down + + When starting a backup job users can now use a flag which prevents the VM + to be completely cleaned up if the guest OS shuts down while the backup is + running so that the backup can be finalized. + * **Bug fixes** * ch: Use correct domain definition in chDomainGetXMLDesc() @@ -83,6 +102,13 @@ v11.10.0 (unreleased) if the QEMU binary had it built-in. It is now limited to only platforms with the TDX kernel feature available for use. + * qemu: set ``detect_zeroes`` for all backing chain layers + + Some block jobs (snapshots, block commit) could modify the backing chain in + a way where ``detect_zeroes`` would no longer be honoured. We now set + it for all images in the backing chain, so that it will behave correctly + even after those operations. + v11.9.0 (2025-11-03) ==================== -- 2.52.0

2 1

[PATCH] formatdomaincaps: Fix typo in Hyper-V Enlightenments section
by Jiri Denemark 28 Nov '25

28 Nov '25

From: Jiri Denemark <jdenemar(a)redhat.com> Signed-off-by: Jiri Denemark <jdenemar(a)redhat.com> --- docs/formatdomaincaps.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/formatdomaincaps.rst b/docs/formatdomaincaps.rst index 32dc09d41e..8b4f0ecff3 100644 --- a/docs/formatdomaincaps.rst +++ b/docs/formatdomaincaps.rst @@ -871,7 +871,7 @@ are supported. The ``features`` enum corresponds to the ``<hyperv/>`` element (well, its children) as documented in `Hypervisor features <formatdomain.html#hypervisor-features>`__. The ``defaults`` element then contains child elements describing default values as reported by hypervisor, -e.h. whether direct or extended TLB flushes are available. :since:`(since +e.g. whether direct or extended TLB flushes are available. :since:`(since 11.9.0)` Launch security -- 2.51.1

2 1

[PATCH] NEWS: Fix incoming migration to QEMU 10.0.0
by Jiri Denemark 28 Nov '25

28 Nov '25

From: Jiri Denemark <jdenemar(a)redhat.com> Signed-off-by: Jiri Denemark <jdenemar(a)redhat.com> --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index c742954091..d5028d230d 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -43,6 +43,13 @@ v11.10.0 (unreleased) subdirectory, the ESX driver would have failed to parse that and an error was reported when obtaining domain XML. This is now fixed. + * qemu: Fix incoming migration to QEMU 10.0.0 and newer + + Due to a change in the way QEMU 10.0.0 reports the state of "ht" CPU + feature, incoming migration of a domain with multiple CPU threads would + fail with "guest CPU doesn't match specification: extra features: ht" + error. + v11.9.0 (2025-11-03) ==================== -- 2.51.1

2 1

[PATCH] NEWS: Add CVE-2025-12748
by Martin Kletzander 28 Nov '25

28 Nov '25

From: Martin Kletzander <mkletzan(a)redhat.com> Signed-off-by: Martin Kletzander <mkletzan(a)redhat.com> --- NEWS.rst | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index c742954091df..8cc6e698ca25 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -13,6 +13,22 @@ v11.10.0 (unreleased) * **Security** + * CVE-2025-12748: Denial of service by some ACL-limited accounts + + Parsing of user provided XMLs in APIs which needed the identification + information from those XML definitions was done in full before ACL checks + were performed. Some valid, but useless, definitions could cause allocation + of too much memory, leading to denial of service. APIs which do equate to + full root access (such as ``domain:write``), and were parsing XML + definitions in full before performing ACL checks could, potentially, be + exploited in a way that would allow users (which were about to be denied the + API call) to cause aforementioned overallocation even before the ACL checks + were performed. + + A change was made so that parsing before ACL checks are done only for the + identification parts of the XML definition (which is needed to perform the + checks) and full parsing is done only after checking all ACLs. + * **Removed features** * **New features** -- 2.52.0

2 2

[PATCH] news: document improved certs, host validate details & TDX fix
by Daniel P. Berrangé 28 Nov '25

28 Nov '25

From: Daniel P. Berrangé <berrange(a)redhat.com> Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com> --- NEWS.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 7c3a6c01e7..a41f53e00d 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -30,8 +30,25 @@ v11.10.0 (unreleased) Bhyve guests can now be configured to wait for a VNC connection before booting. + * remote: multiple certificate support + + The remote daemon and client can be configured to load multiple x509 + certificate identities. This facilitates a transition to certificates + supporting Post-Quantum Crytographic algorithms. + + * tools: improved virt-host-validate output + + The virt-host-validate tool will now report extra details when certain + checks pass. + * **Bug fixes** + * qemu: fix incorrect reporting of the TDX launch security type + + The TDX launch security type was incorrectly reported on all platforms + if the QEMU binary had it built-in. It is now limited to only platforms + with the TDX kernel feature available for use. + v11.9.0 (2025-11-03) ==================== -- 2.51.1

2 1

[PATCH] rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44
by Daniel P. Berrangé 27 Nov '25

27 Nov '25

From: Daniel P. Berrangé <berrange(a)redhat.com> Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com> --- libvirt.spec.in | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/libvirt.spec.in b/libvirt.spec.in index 62af7fb517..8b3bc9884f 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -32,12 +32,22 @@ %define arches_ch x86_64 aarch64 # The hypervisor drivers that run in libvirtd -%define with_qemu 0%{!?_without_qemu:1} %define with_lxc 0%{!?_without_lxc:1} %define with_libxl 0%{!?_without_libxl:1} %define with_vbox 0%{!?_without_vbox:1} %define with_ch 0%{!?_without_ch:1} +%ifarch %{arches_64bit} + %define with_qemu 0%{!?_without_qemu:1} +%else + # QEMU drops 32-bit in Fedora 44 + %if %{?fedora} > 43 + %define with_qemu 0 + %else + %define with_qemu 0%{!?_without_qemu:1} + %endif +%endif + %ifarch %{arches_qemu_kvm} %define with_qemu_kvm %{with_qemu} %else -- 2.51.1

2 1

[PATCH] rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44
by Daniel P. Berrangé 27 Nov '25

27 Nov '25

From: Daniel P. Berrangé <berrange(a)redhat.com> Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com> --- libvirt.spec.in | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/libvirt.spec.in b/libvirt.spec.in index 62af7fb517..8b3bc9884f 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -32,12 +32,22 @@ %define arches_ch x86_64 aarch64 # The hypervisor drivers that run in libvirtd -%define with_qemu 0%{!?_without_qemu:1} %define with_lxc 0%{!?_without_lxc:1} %define with_libxl 0%{!?_without_libxl:1} %define with_vbox 0%{!?_without_vbox:1} %define with_ch 0%{!?_without_ch:1} +%ifarch %{arches_64bit} + %define with_qemu 0%{!?_without_qemu:1} +%else + # QEMU drops 32-bit in Fedora 44 + %if %{?fedora} > 43 + %define with_qemu 0 + %else + %define with_qemu 0%{!?_without_qemu:1} + %endif +%endif + %ifarch %{arches_qemu_kvm} %define with_qemu_kvm %{with_qemu} %else -- 2.51.1

1 0

[PATCH] NEWS: Document features/improvements/bug fixes I've participated in
by Michal Privoznik 27 Nov '25

27 Nov '25

From: Michal Privoznik <mprivozn(a)redhat.com> There are some features/improvements/bug fixes I've either contributed or reviewed/merged. Document them for upcoming release. Signed-off-by: Michal Privoznik <mprivozn(a)redhat.com> --- NEWS.rst | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 7c3a6c01e7..4d9b98f93c 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -32,6 +32,17 @@ v11.10.0 (unreleased) * **Bug fixes** + * ch: Use correct domain definition in chDomainGetXMLDesc() + + Cloud-Hyper driver claims to support ``VIR_DOMAIN_XML_INACTIVE`` but in + fact it never formatted the inactive XML. This is now fixed. + + * esx: Allow disk images in subdirectories + + If a domain has a disk image that's not in a datastore path but in a + subdirectory, the ESX driver would have failed to parse that and an error + was reported when obtaining domain XML. This is now fixed. + v11.9.0 (2025-11-03) ==================== -- 2.51.2

2 1

Entering freeze for libvirt-11.10.0
by Jiri Denemark 27 Nov '25

27 Nov '25

I have just tagged v11.10.0-rc1 in the repository and pushed signed tarballs to https://download.libvirt.org/ Please give the release candidate some testing and in case you find a serious issue which should have a fix in the upcoming release, feel free to reply to this thread to make sure the issue is more visible. If you have not done so yet, please update NEWS.rst to document any significant change you made since the last release. Jirka

1 1

[PATCH] virCgroupSetValueRaw: Use 'const' temporary variable
by Peter Krempa 26 Nov '25

26 Nov '25

From: Peter Krempa <pkrempa(a)redhat.com> 'char *tmp' is assigned from calling 'strrchr' on a 'const char *'. New clang in fedora doesn't like it. Make 'tmp' const. Signed-off-by: Peter Krempa <pkrempa(a)redhat.com> --- https://gitlab.com/MichalPrivoznik/libvirt/-/jobs/12208300313 src/util/vircgroup.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/util/vircgroup.c b/src/util/vircgroup.c index 532a7e5690..3d66d3acb2 100644 --- a/src/util/vircgroup.c +++ b/src/util/vircgroup.c @@ -517,7 +517,7 @@ int virCgroupSetValueRaw(const char *path, const char *value) { - char *tmp; + const char *tmp; VIR_DEBUG("Set path '%s' to value '%s'", path, value); if (virFileWriteStr(path, value, 0) < 0) { -- 2.52.0

4 10

[PATCH] docs/deprecated: Remove undeprecated SMP description
by Zhao Liu 25 Nov '25

25 Nov '25

"Unsupported 'parameter=1' SMP configuration" was proposed to be deprecated in the commit 54c4ea8f3ae6 ("hw/core/machine-smp: Deprecate unsupported "parameter=1" SMP configurations"). But the related code was reverted later in the commit 9d7950edb0cd ("hw/core: allow parameter=1 for SMP topology on any machine"). Thus, this SMP behavior is still valid and is not actually deprecated. Remove outdated document descriptions. Reported-by: Markus Armbruster <armbru(a)redhat.com> Signed-off-by: Zhao Liu <zhao1.liu(a)intel.com> --- docs/about/deprecated.rst | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/docs/about/deprecated.rst b/docs/about/deprecated.rst index 03e29915f0aa..bbfcce4a1ab3 100644 --- a/docs/about/deprecated.rst +++ b/docs/about/deprecated.rst @@ -54,20 +54,6 @@ as short-form boolean values, and passed to plugins as ``arg_name=on``. However, short-form booleans are deprecated and full explicit ``arg_name=on`` form is preferred. -``-smp`` (Unsupported "parameter=1" SMP configurations) (since 9.0) -''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' - -Specified CPU topology parameters must be supported by the machine. - -In the SMP configuration, users should provide the CPU topology parameters that -are supported by the target machine. - -However, historically it was allowed for users to specify the unsupported -topology parameter as "1", which is meaningless. So support for this kind of -configurations (e.g. -smp drawers=1,books=1,clusters=1 for x86 PC machine) is -marked deprecated since 9.0, users have to ensure that all the topology members -described with -smp are supported by the target machine. - QEMU Machine Protocol (QMP) commands ------------------------------------ -- 2.34.1

3 2

git tags for CVEs
by Peter Krempa 25 Nov '25

25 Nov '25

We've recently tagged a few patches fixing CVEs with signed git tags. We also in the past tagged patches fixing CVEs. I've identified a list of CVEs (including commit hashes) that weren't tagged yet. The list below was first compiled using this "simple one liner": git log | grep -o 'CVE-[0-9]\+-[0-9]\+\|^commit [0-9a-z]\+' | grep -B 1 'CVE-' | grep -v '^--' | tr "\n" " " | sed 's/commit/\ncommit/g' | grep -v "$(git tag ' | sed -e 's/|$//' -e 's/|/\\|/g')" > cves (Basically looking for 'CVE-' strings in the commit log and cross-referencing it with the list of tags (badly for that matter I halfway realized that I pasted in the sub-command supposed to find CVEs wrong but was too far in to re-try)) And then manually going trhough the list. I've identified the following commits: (single commits) commit 8dfb12cb77996519901b8d52c754ab564ebd10e8 CVE-2024-8235 commit 8074d64dc2eca846d6a61efe1a9b7428a0ce1dd1 CVE-2024-4418 commit 8a3f8d957507c1f8223fdcf25a3ff885b15557f2 CVE-2024-2494 commit c664015fe3a7bf59db26686e9ed69af011c6ebb8 CVE-2024-1441 commit 9a47442366fcf8a7b6d7422016d7bbb6764a1098 CVE-2023-3750 commit a4947e8f63c3e6b7b067b444f3d6cf674c0d7f36 CVE-2022-0897 commit 15073504dbb624d3f6c911e85557019d3620fdb2 CVE-2021-3631 commit 22494556542c676d1b9e7f1c1f2ea13ac17e1e3e CVE-2020-14339 commit bf6c2830b6c338b1f5699b095df36f374777b291 CVE-2019-10168 commit 8afa68bac0cf99d1f8aaa6566685c43c22622f26 CVE-2019-10167 commit db0b78457f183e4c7ac45bc94de86044a1e2056a CVE-2019-10166 commit aed6a032cead4386472afb24b16196579e239580 CVE-2019-10161 commit fbf31e1a4cd19d6f6e33e0937a009775cd7d9513 CVE-2018-1064 commit bc251ea91bcfddd2622fce6bce701a438b2e7276 CVE-2018-5748 commit 57023c0a3af4af1c547189c1f6712ed5edeb0c0b CVE-2014-8131 commit c567853089a2764c964002dd752e09e318524a38 CVE-2010-2242 commit 53611889ff93c442028828c70472151a7cf1bf4d CVE-2008-5086 (patchsets, where multiple patches bear CVE number, histrically we've tagged all of them with numbered tags) commit a63b48c5ecef077bf0f909a85f453a605600cf05 CVE-2020-25637 commit e4116eaa44cb366b59f7fe98f4b88d04c04970ad CVE-2020-25637 commit 50864dcda191eb35732dbd80fb6ca251a6bba923 CVE-2020-25637 commit 955029bd0ad7ef96000f529ac38204a8f4a96401 CVE-2020-25637 commit e37bd65f9948c1185456b2cdaa3bd6e875af680f CVE-2019-10132 commit f111e09468693909b1f067aa575efdafd9a262a1 CVE-2019-10132 commit 96f41cd765c9e525fe28ee5abbfbf4a79b3720c7 CVE-2019-10132 commit ae076bb40e0e150aef41361b64001138d04d6c60 CVE-2019-3886 commit 2a07c990bd9143d7a0fe8d1b6b7c763c52185240 CVE-2019-3886 commit c2dc6698c88fb591639e542c8ecb0076c54f3dfb CVE-2018-6764 commit 759b4d1b0fe5f4d84d98b99153dfa7ac289dd167 CVE-2018-6764 commit b347c0c2a321ec5c20aae214927949832a288c5a CVE-2015-0236 commit 03c3c0c874c84dfa51ef17556062b095c6e1c0a3 CVE-2015-0236 commit 5fc590ad9f4071350a8df4d567ba88baacc8334d CVE-2013-6456 commit 1cadeafcaa422844a27ef622e2a7041d0235bcb3 CVE-2013-6456 commit 1754c7f0ab1407dcf7c89636a35711dd9b1febe1 CVE-2013-6456 commit 7fba01c15c1f886b4235825692b4c13e88dd9f7b CVE-2013-6456 commit 4dd3a7d5bc44980135a1b11810ba9aeab42a4a59 CVE-2013-6456 commit aebbcdd33c8c18891f0bdbbf8924599a28152c9c CVE-2013-6456 And finally few manually synthetized entries based on CVE references. commit 447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87 CVE-2021-3667 commit 68719c4bddb85fbcc931a5b7d99ac7c8a0af09b0 CVE-2010-2238 Thus if we want to keep tagging CVEs the above list ought to be tagged. I've also got a few work in progress patches/branches which will e.g. add a CI job to do (a more robust) cross-check of the CVE numbers with the commitlog and NEWS file, etc. In addition our commit log also references non-libvirt cves: CVE-2022-24765 - git permission issue when repo is shared between users CVE-2020-15708 - bug in Ubuntu's packaging of libvirt CVE-2013-0242 - memory corruption in gnulib's regex() CVE-2012-3386 - bug in automake's distcheck rules giving world-writable perms CVE-2011-4127 - qemu allowing SCSI/SG_IO command passthrough CPU vulnerabllities: CVE-2019-11135 - TSX Asynchronous Abort condition on some CPUs CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 - Microarchitectural Store Buffer Data Sampling (MSBDS) cpu vulnerabilities CVE-2018-3639 - Speculative Store Bypass (SSB), Variant 4. CVE-2017-5715 - speculative execution by utilizing branch target injection

1 1

[PATCH v3] ci: refresh with 'lcitool manifest'
by Michal Privoznik 25 Nov '25

25 Nov '25

From: Michal Privoznik <mprivozn(a)redhat.com> - Add AlmaLinux 10 - Add CentOS Stream 10 - Add Fedora 43 - Remove EOL Fedora 41 - Switch mingw from Fedora 42 to Fedora 43 - Switch integration tests from Fedora 41 to Fedora 43 Signed-off-by: Michal Privoznik <mprivozn(a)redhat.com> --- v3 of: https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/message/XBR… diff to v2: - Keep rpms for centos 9 ci/buildenv/almalinux-10.sh | 93 ++++++++++++++++++ ci/buildenv/centos-stream-10.sh | 92 ++++++++++++++++++ ...-mingw32.sh => fedora-43-cross-mingw32.sh} | 0 ...-mingw64.sh => fedora-43-cross-mingw64.sh} | 0 ci/buildenv/{fedora-41.sh => fedora-43.sh} | 0 ci/containers/almalinux-10.Dockerfile | 96 +++++++++++++++++++ ci/containers/centos-stream-10.Dockerfile | 95 ++++++++++++++++++ ...ile => fedora-43-cross-mingw32.Dockerfile} | 2 +- ...ile => fedora-43-cross-mingw64.Dockerfile} | 2 +- ...ora-41.Dockerfile => fedora-43.Dockerfile} | 2 +- ci/gitlab/builds.yml | 87 ++++++++++++----- ci/gitlab/containers.yml | 36 ++++--- ci/integration.yml | 20 ++-- ci/manifest.yml | 37 +++++-- 14 files changed, 507 insertions(+), 55 deletions(-) create mode 100644 ci/buildenv/almalinux-10.sh create mode 100644 ci/buildenv/centos-stream-10.sh rename ci/buildenv/{fedora-42-cross-mingw32.sh => fedora-43-cross-mingw32.sh} (100%) rename ci/buildenv/{fedora-42-cross-mingw64.sh => fedora-43-cross-mingw64.sh} (100%) rename ci/buildenv/{fedora-41.sh => fedora-43.sh} (100%) create mode 100644 ci/containers/almalinux-10.Dockerfile create mode 100644 ci/containers/centos-stream-10.Dockerfile rename ci/containers/{fedora-42-cross-mingw32.Dockerfile => fedora-43-cross-mingw32.Dockerfile} (98%) rename ci/containers/{fedora-42-cross-mingw64.Dockerfile => fedora-43-cross-mingw64.Dockerfile} (98%) rename ci/containers/{fedora-41.Dockerfile => fedora-43.Dockerfile} (98%) diff --git a/ci/buildenv/almalinux-10.sh b/ci/buildenv/almalinux-10.sh new file mode 100644 index 0000000000..d69d0c4267 --- /dev/null +++ b/ci/buildenv/almalinux-10.sh @@ -0,0 +1,93 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +function install_buildenv() { + dnf update -y + dnf install 'dnf-command(config-manager)' -y + dnf config-manager --set-enabled -y crb + dnf install -y epel-release + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + systemtap-sdt-dtrace \ + wireshark-devel + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED + rpm -qa | sort > /packages.txt + mkdir -p /usr/libexec/ccache-wrappers + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + /usr/bin/pip3 install \ + black \ + flake8 +} + +export CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +export LANG="en_US.UTF-8" +export MAKE="/usr/bin/make" +export NINJA="/usr/bin/ninja" +export PYTHON="/usr/bin/python3" diff --git a/ci/buildenv/centos-stream-10.sh b/ci/buildenv/centos-stream-10.sh new file mode 100644 index 0000000000..2747adfb38 --- /dev/null +++ b/ci/buildenv/centos-stream-10.sh @@ -0,0 +1,92 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +function install_buildenv() { + dnf distro-sync -y + dnf install 'dnf-command(config-manager)' -y + dnf config-manager --set-enabled -y crb + dnf install -y epel-release + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + wireshark-devel + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED + rpm -qa | sort > /packages.txt + mkdir -p /usr/libexec/ccache-wrappers + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + /usr/bin/pip3 install \ + black \ + flake8 +} + +export CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +export LANG="en_US.UTF-8" +export MAKE="/usr/bin/make" +export NINJA="/usr/bin/ninja" +export PYTHON="/usr/bin/python3" diff --git a/ci/buildenv/fedora-42-cross-mingw32.sh b/ci/buildenv/fedora-43-cross-mingw32.sh similarity index 100% rename from ci/buildenv/fedora-42-cross-mingw32.sh rename to ci/buildenv/fedora-43-cross-mingw32.sh diff --git a/ci/buildenv/fedora-42-cross-mingw64.sh b/ci/buildenv/fedora-43-cross-mingw64.sh similarity index 100% rename from ci/buildenv/fedora-42-cross-mingw64.sh rename to ci/buildenv/fedora-43-cross-mingw64.sh diff --git a/ci/buildenv/fedora-41.sh b/ci/buildenv/fedora-43.sh similarity index 100% rename from ci/buildenv/fedora-41.sh rename to ci/buildenv/fedora-43.sh diff --git a/ci/containers/almalinux-10.Dockerfile b/ci/containers/almalinux-10.Dockerfile new file mode 100644 index 0000000000..815b4c0e68 --- /dev/null +++ b/ci/containers/almalinux-10.Dockerfile @@ -0,0 +1,96 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +FROM docker.io/library/almalinux:10 + +RUN dnf update -y && \ + dnf install 'dnf-command(config-manager)' -y && \ + dnf config-manager --set-enabled -y crb && \ + dnf install -y epel-release && \ + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + systemtap-sdt-dtrace \ + wireshark-devel && \ + dnf autoremove -y && \ + dnf clean all -y && \ + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED && \ + rpm -qa | sort > /packages.txt && \ + mkdir -p /usr/libexec/ccache-wrappers && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + +RUN /usr/bin/pip3 install \ + black \ + flake8 + +ENV CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +ENV LANG="en_US.UTF-8" +ENV MAKE="/usr/bin/make" +ENV NINJA="/usr/bin/ninja" +ENV PYTHON="/usr/bin/python3" diff --git a/ci/containers/centos-stream-10.Dockerfile b/ci/containers/centos-stream-10.Dockerfile new file mode 100644 index 0000000000..5b34b8273a --- /dev/null +++ b/ci/containers/centos-stream-10.Dockerfile @@ -0,0 +1,95 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +FROM quay.io/centos/centos:stream10 + +RUN dnf distro-sync -y && \ + dnf install 'dnf-command(config-manager)' -y && \ + dnf config-manager --set-enabled -y crb && \ + dnf install -y epel-release && \ + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + wireshark-devel && \ + dnf autoremove -y && \ + dnf clean all -y && \ + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED && \ + rpm -qa | sort > /packages.txt && \ + mkdir -p /usr/libexec/ccache-wrappers && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + +RUN /usr/bin/pip3 install \ + black \ + flake8 + +ENV CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +ENV LANG="en_US.UTF-8" +ENV MAKE="/usr/bin/make" +ENV NINJA="/usr/bin/ninja" +ENV PYTHON="/usr/bin/python3" diff --git a/ci/containers/fedora-42-cross-mingw32.Dockerfile b/ci/containers/fedora-43-cross-mingw32.Dockerfile similarity index 98% rename from ci/containers/fedora-42-cross-mingw32.Dockerfile rename to ci/containers/fedora-43-cross-mingw32.Dockerfile index 94d9378850..de7bee20e1 100644 --- a/ci/containers/fedora-42-cross-mingw32.Dockerfile +++ b/ci/containers/fedora-43-cross-mingw32.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:42 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/containers/fedora-42-cross-mingw64.Dockerfile b/ci/containers/fedora-43-cross-mingw64.Dockerfile similarity index 98% rename from ci/containers/fedora-42-cross-mingw64.Dockerfile rename to ci/containers/fedora-43-cross-mingw64.Dockerfile index 9d59a70975..ff6c3f8aa9 100644 --- a/ci/containers/fedora-42-cross-mingw64.Dockerfile +++ b/ci/containers/fedora-43-cross-mingw64.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:42 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/containers/fedora-41.Dockerfile b/ci/containers/fedora-43.Dockerfile similarity index 98% rename from ci/containers/fedora-41.Dockerfile rename to ci/containers/fedora-43.Dockerfile index 89732dd529..55f68a5839 100644 --- a/ci/containers/fedora-41.Dockerfile +++ b/ci/containers/fedora-43.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:41 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/gitlab/builds.yml b/ci/gitlab/builds.yml index ae691862c2..a98b0d9c46 100644 --- a/ci/gitlab/builds.yml +++ b/ci/gitlab/builds.yml @@ -33,6 +33,32 @@ x86_64-almalinux-9-clang: TARGET_BASE_IMAGE: docker.io/library/almalinux:9 +x86_64-almalinux-10: + extends: .native_build_job + needs: + - job: x86_64-almalinux-10-container + optional: true + allow_failure: false + variables: + JOB_OPTIONAL: 1 + NAME: almalinux-10 + RPM: skip + TARGET_BASE_IMAGE: docker.io/library/almalinux:10 + + +x86_64-almalinux-10-clang: + extends: .native_build_job + needs: + - job: x86_64-almalinux-10-container + optional: true + allow_failure: false + variables: + CC: clang + NAME: almalinux-10 + RPM: skip + TARGET_BASE_IMAGE: docker.io/library/almalinux:10 + + x86_64-alpine-322: extends: .native_build_job needs: @@ -70,6 +96,21 @@ x86_64-centos-stream-9: - libvirt-rpms +x86_64-centos-stream-10: + extends: .native_build_job + needs: + - job: x86_64-centos-stream-10-container + optional: true + allow_failure: false + variables: + NAME: centos-stream-10 + TARGET_BASE_IMAGE: quay.io/centos/centos:stream10 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + + x86_64-debian-12: extends: .native_build_job needs: @@ -103,21 +144,6 @@ x86_64-debian-sid: TARGET_BASE_IMAGE: docker.io/library/debian:sid-slim -x86_64-fedora-41: - extends: .native_build_job - needs: - - job: x86_64-fedora-41-container - optional: true - allow_failure: false - variables: - NAME: fedora-41 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:41 - artifacts: - expire_in: 1 day - paths: - - libvirt-rpms - - x86_64-fedora-42: extends: .native_build_job needs: @@ -133,6 +159,21 @@ x86_64-fedora-42: - libvirt-rpms +x86_64-fedora-43: + extends: .native_build_job + needs: + - job: x86_64-fedora-43-container + optional: true + allow_failure: false + variables: + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + + x86_64-fedora-rawhide: extends: .native_build_job needs: @@ -416,29 +457,29 @@ s390x-debian-sid: TARGET_BASE_IMAGE: docker.io/library/debian:sid-slim -mingw32-fedora-42: +mingw32-fedora-43: extends: .cross_build_job needs: - - job: mingw32-fedora-42-container + - job: mingw32-fedora-43-container optional: true allow_failure: false variables: CROSS: mingw32 JOB_OPTIONAL: 1 - NAME: fedora-42 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:42 + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 -mingw64-fedora-42: +mingw64-fedora-43: extends: .cross_build_job needs: - - job: mingw64-fedora-42-container + - job: mingw64-fedora-43-container optional: true allow_failure: false variables: CROSS: mingw64 - NAME: fedora-42 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:42 + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 mingw32-fedora-rawhide: diff --git a/ci/gitlab/containers.yml b/ci/gitlab/containers.yml index 0650e4781c..56b974f2a1 100644 --- a/ci/gitlab/containers.yml +++ b/ci/gitlab/containers.yml @@ -14,6 +14,13 @@ x86_64-almalinux-9-container: NAME: almalinux-9 +x86_64-almalinux-10-container: + extends: .container_job + allow_failure: false + variables: + NAME: almalinux-10 + + x86_64-alpine-322-container: extends: .container_job allow_failure: false @@ -35,6 +42,13 @@ x86_64-centos-stream-9-container: NAME: centos-stream-9 +x86_64-centos-stream-10-container: + extends: .container_job + allow_failure: false + variables: + NAME: centos-stream-10 + + x86_64-debian-12-container: extends: .container_job allow_failure: false @@ -49,13 +63,6 @@ x86_64-debian-sid-container: NAME: debian-sid -x86_64-fedora-41-container: - extends: .container_job - allow_failure: false - variables: - NAME: fedora-41 - - x86_64-fedora-42-container: extends: .container_job allow_failure: false @@ -63,6 +70,13 @@ x86_64-fedora-42-container: NAME: fedora-42 +x86_64-fedora-43-container: + extends: .container_job + allow_failure: false + variables: + NAME: fedora-43 + + x86_64-fedora-rawhide-container: extends: .container_job allow_failure: true @@ -220,19 +234,19 @@ s390x-debian-sid-container: NAME: debian-sid-cross-s390x -mingw32-fedora-42-container: +mingw32-fedora-43-container: extends: .container_job allow_failure: false variables: JOB_OPTIONAL: 1 - NAME: fedora-42-cross-mingw32 + NAME: fedora-43-cross-mingw32 -mingw64-fedora-42-container: +mingw64-fedora-43-container: extends: .container_job allow_failure: false variables: - NAME: fedora-42-cross-mingw64 + NAME: fedora-43-cross-mingw64 mingw32-fedora-rawhide-container: diff --git a/ci/integration.yml b/ci/integration.yml index 2c5e5a65bc..b7e301b4c0 100644 --- a/ci/integration.yml +++ b/ci/integration.yml @@ -29,23 +29,23 @@ centos-stream-9-tests: # and libvirt-python CI jobs, so the new target needs to be introduced # there before it can be used here. The VM template for the target # also needs to be created on the runner host. -fedora-41-tests: +fedora-43-tests: extends: .integration_tests variables: # needed by libvirt-gitlab-executor - DISTRO: fedora-41 + DISTRO: fedora-43 # can be overridden in forks to set a different runner tag LIBVIRT_CI_INTEGRATION_RUNNER_TAG: redhat-vm-host tags: - $LIBVIRT_CI_INTEGRATION_RUNNER_TAG needs: - - x86_64-fedora-41 + - x86_64-fedora-43 - project: libvirt/libvirt-perl - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true - project: libvirt/libvirt-python - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true @@ -53,22 +53,22 @@ fedora-41-tests: # and libvirt-python CI jobs, so the new target needs to be introduced # there before it can be used here. The VM template for the target # also needs to be created on the runner host. -.fedora-41-upstream-qemu-tests: +.fedora-43-upstream-qemu-tests: extends: .integration_tests variables: # needed by libvirt-gitlab-executor - DISTRO: fedora-41 + DISTRO: fedora-43 # can be overridden in forks to set a different runner tag LIBVIRT_CI_INTEGRATION_RUNNER_TAG: redhat-vm-host tags: - $LIBVIRT_CI_INTEGRATION_RUNNER_TAG needs: - - x86_64-fedora-41 + - x86_64-fedora-43 - project: libvirt/libvirt-perl - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true - project: libvirt/libvirt-python - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true diff --git a/ci/manifest.yml b/ci/manifest.yml index 21d570cb00..2fdb764142 100644 --- a/ci/manifest.yml +++ b/ci/manifest.yml @@ -19,6 +19,19 @@ targets: RPM: skip CC: clang + almalinux-10: + jobs: + - arch: x86_64 + builds: false + variables: + RPM: skip + + - arch: x86_64 + suffix: -clang + variables: + RPM: skip + CC: clang + alpine-322: x86_64 alpine-edge: @@ -34,6 +47,14 @@ targets: paths: - libvirt-rpms + centos-stream-10: + jobs: + - arch: x86_64 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + debian-12: jobs: - arch: x86_64 @@ -104,14 +125,6 @@ targets: containers: false builds: false - fedora-41: - jobs: - - arch: x86_64 - artifacts: - expire_in: 1 day - paths: - - libvirt-rpms - fedora-42: jobs: - arch: x86_64 @@ -120,6 +133,14 @@ targets: paths: - libvirt-rpms + fedora-43: + jobs: + - arch: x86_64 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + - arch: mingw32 builds: false -- 2.51.2

2 1

[PATCH] NEWS: Document Hyper-V virttype for Qemu Domains
by Praveen K Paladugu 25 Nov '25

25 Nov '25

Signed-off-by: Praveen K Paladugu <prapal(a)linux.microsoft.com> --- NEWS.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index e2d382d5f8..277ca41493 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -17,6 +17,12 @@ v11.10.0 (unreleased) * **New features** + * Introduce Hyper-V virttype support for Qemu domains + + Libvirt now supports Hyper-V virttype while lauching QEMU domains. This + feature requires Qemu version 10.2.0 or later and is available on Linux + hosts where the /dev/mshv is present. + * **Improvements** * bhyve: VNC ``wait`` attribute support -- 2.51.0

2 1

[PATCH v2] ci: refresh with 'lcitool manifest'
by Michal Privoznik 25 Nov '25

25 Nov '25

From: Michal Privoznik <mprivozn(a)redhat.com> - Add AlmaLinux 10 - Add CentOS Stream 10 - Add Fedora 43 - Remove EOL Fedora 41 - Switch mingw from Fedora 42 to Fedora 43 - Switch integration tests from Fedora 41 to Fedora 43 Signed-off-by: Michal Privoznik <mprivozn(a)redhat.com> --- v2 of: https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/XSPN… diff to v1: - Added AlmaLinux 10 and CentOS Stream 10 Greenish pipeline: https://gitlab.com/MichalPrivoznik/libvirt/-/pipelines/2178025436 ci/buildenv/almalinux-10.sh | 93 ++++++++++++++++++ ci/buildenv/centos-stream-10.sh | 92 ++++++++++++++++++ ...-mingw32.sh => fedora-43-cross-mingw32.sh} | 0 ...-mingw64.sh => fedora-43-cross-mingw64.sh} | 0 ci/buildenv/{fedora-41.sh => fedora-43.sh} | 0 ci/containers/almalinux-10.Dockerfile | 96 +++++++++++++++++++ ci/containers/centos-stream-10.Dockerfile | 95 ++++++++++++++++++ ...ile => fedora-43-cross-mingw32.Dockerfile} | 2 +- ...ile => fedora-43-cross-mingw64.Dockerfile} | 2 +- ...ora-41.Dockerfile => fedora-43.Dockerfile} | 2 +- ci/gitlab/builds.yml | 83 +++++++++++----- ci/gitlab/containers.yml | 36 ++++--- ci/integration.yml | 20 ++-- ci/manifest.yml | 33 +++++-- 14 files changed, 499 insertions(+), 55 deletions(-) create mode 100644 ci/buildenv/almalinux-10.sh create mode 100644 ci/buildenv/centos-stream-10.sh rename ci/buildenv/{fedora-42-cross-mingw32.sh => fedora-43-cross-mingw32.sh} (100%) rename ci/buildenv/{fedora-42-cross-mingw64.sh => fedora-43-cross-mingw64.sh} (100%) rename ci/buildenv/{fedora-41.sh => fedora-43.sh} (100%) create mode 100644 ci/containers/almalinux-10.Dockerfile create mode 100644 ci/containers/centos-stream-10.Dockerfile rename ci/containers/{fedora-42-cross-mingw32.Dockerfile => fedora-43-cross-mingw32.Dockerfile} (98%) rename ci/containers/{fedora-42-cross-mingw64.Dockerfile => fedora-43-cross-mingw64.Dockerfile} (98%) rename ci/containers/{fedora-41.Dockerfile => fedora-43.Dockerfile} (98%) diff --git a/ci/buildenv/almalinux-10.sh b/ci/buildenv/almalinux-10.sh new file mode 100644 index 0000000000..d69d0c4267 --- /dev/null +++ b/ci/buildenv/almalinux-10.sh @@ -0,0 +1,93 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +function install_buildenv() { + dnf update -y + dnf install 'dnf-command(config-manager)' -y + dnf config-manager --set-enabled -y crb + dnf install -y epel-release + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + systemtap-sdt-dtrace \ + wireshark-devel + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED + rpm -qa | sort > /packages.txt + mkdir -p /usr/libexec/ccache-wrappers + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + /usr/bin/pip3 install \ + black \ + flake8 +} + +export CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +export LANG="en_US.UTF-8" +export MAKE="/usr/bin/make" +export NINJA="/usr/bin/ninja" +export PYTHON="/usr/bin/python3" diff --git a/ci/buildenv/centos-stream-10.sh b/ci/buildenv/centos-stream-10.sh new file mode 100644 index 0000000000..2747adfb38 --- /dev/null +++ b/ci/buildenv/centos-stream-10.sh @@ -0,0 +1,92 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +function install_buildenv() { + dnf distro-sync -y + dnf install 'dnf-command(config-manager)' -y + dnf config-manager --set-enabled -y crb + dnf install -y epel-release + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + wireshark-devel + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED + rpm -qa | sort > /packages.txt + mkdir -p /usr/libexec/ccache-wrappers + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + /usr/bin/pip3 install \ + black \ + flake8 +} + +export CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +export LANG="en_US.UTF-8" +export MAKE="/usr/bin/make" +export NINJA="/usr/bin/ninja" +export PYTHON="/usr/bin/python3" diff --git a/ci/buildenv/fedora-42-cross-mingw32.sh b/ci/buildenv/fedora-43-cross-mingw32.sh similarity index 100% rename from ci/buildenv/fedora-42-cross-mingw32.sh rename to ci/buildenv/fedora-43-cross-mingw32.sh diff --git a/ci/buildenv/fedora-42-cross-mingw64.sh b/ci/buildenv/fedora-43-cross-mingw64.sh similarity index 100% rename from ci/buildenv/fedora-42-cross-mingw64.sh rename to ci/buildenv/fedora-43-cross-mingw64.sh diff --git a/ci/buildenv/fedora-41.sh b/ci/buildenv/fedora-43.sh similarity index 100% rename from ci/buildenv/fedora-41.sh rename to ci/buildenv/fedora-43.sh diff --git a/ci/containers/almalinux-10.Dockerfile b/ci/containers/almalinux-10.Dockerfile new file mode 100644 index 0000000000..815b4c0e68 --- /dev/null +++ b/ci/containers/almalinux-10.Dockerfile @@ -0,0 +1,96 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +FROM docker.io/library/almalinux:10 + +RUN dnf update -y && \ + dnf install 'dnf-command(config-manager)' -y && \ + dnf config-manager --set-enabled -y crb && \ + dnf install -y epel-release && \ + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + systemtap-sdt-dtrace \ + wireshark-devel && \ + dnf autoremove -y && \ + dnf clean all -y && \ + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED && \ + rpm -qa | sort > /packages.txt && \ + mkdir -p /usr/libexec/ccache-wrappers && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + +RUN /usr/bin/pip3 install \ + black \ + flake8 + +ENV CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +ENV LANG="en_US.UTF-8" +ENV MAKE="/usr/bin/make" +ENV NINJA="/usr/bin/ninja" +ENV PYTHON="/usr/bin/python3" diff --git a/ci/containers/centos-stream-10.Dockerfile b/ci/containers/centos-stream-10.Dockerfile new file mode 100644 index 0000000000..5b34b8273a --- /dev/null +++ b/ci/containers/centos-stream-10.Dockerfile @@ -0,0 +1,95 @@ +# THIS FILE WAS AUTO-GENERATED +# +# $ lcitool manifest ci/manifest.yml +# +# https://gitlab.com/libvirt/libvirt-ci + +FROM quay.io/centos/centos:stream10 + +RUN dnf distro-sync -y && \ + dnf install 'dnf-command(config-manager)' -y && \ + dnf config-manager --set-enabled -y crb && \ + dnf install -y epel-release && \ + dnf install -y \ + audit-libs-devel \ + augeas \ + bash-completion \ + ca-certificates \ + ccache \ + clang \ + compiler-rt \ + cpp \ + cyrus-sasl-devel \ + device-mapper-devel \ + diffutils \ + dwarves \ + ebtables \ + firewalld-filesystem \ + fuse3-devel \ + gcc \ + gettext \ + git \ + glib2-devel \ + glibc-devel \ + glibc-langpack-en \ + gnutls-devel \ + grep \ + json-c-devel \ + libacl-devel \ + libattr-devel \ + libblkid-devel \ + libcap-ng-devel \ + libcurl-devel \ + libnbd-devel \ + libnl3-devel \ + libpcap-devel \ + libpciaccess-devel \ + librbd-devel \ + libselinux-devel \ + libssh-devel \ + libssh2-devel \ + libtirpc-devel \ + libwsman-devel \ + libxml2 \ + libxml2-devel \ + libxslt \ + make \ + meson \ + ninja-build \ + numactl-devel \ + parted-devel \ + perl-base \ + pkgconfig \ + python3 \ + python3-docutils \ + python3-pip \ + python3-pytest \ + python3-setuptools \ + python3-wheel \ + qemu-img \ + readline-devel \ + rpm-build \ + sanlock-devel \ + sed \ + systemd-devel \ + systemd-rpm-macros \ + systemtap-sdt-devel \ + wireshark-devel && \ + dnf autoremove -y && \ + dnf clean all -y && \ + rm -f /usr/lib*/python3*/EXTERNALLY-MANAGED && \ + rpm -qa | sort > /packages.txt && \ + mkdir -p /usr/libexec/ccache-wrappers && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/cc && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/clang && \ + ln -s /usr/bin/ccache /usr/libexec/ccache-wrappers/gcc + +RUN /usr/bin/pip3 install \ + black \ + flake8 + +ENV CCACHE_WRAPPERSDIR="/usr/libexec/ccache-wrappers" +ENV LANG="en_US.UTF-8" +ENV MAKE="/usr/bin/make" +ENV NINJA="/usr/bin/ninja" +ENV PYTHON="/usr/bin/python3" diff --git a/ci/containers/fedora-42-cross-mingw32.Dockerfile b/ci/containers/fedora-43-cross-mingw32.Dockerfile similarity index 98% rename from ci/containers/fedora-42-cross-mingw32.Dockerfile rename to ci/containers/fedora-43-cross-mingw32.Dockerfile index 94d9378850..de7bee20e1 100644 --- a/ci/containers/fedora-42-cross-mingw32.Dockerfile +++ b/ci/containers/fedora-43-cross-mingw32.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:42 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/containers/fedora-42-cross-mingw64.Dockerfile b/ci/containers/fedora-43-cross-mingw64.Dockerfile similarity index 98% rename from ci/containers/fedora-42-cross-mingw64.Dockerfile rename to ci/containers/fedora-43-cross-mingw64.Dockerfile index 9d59a70975..ff6c3f8aa9 100644 --- a/ci/containers/fedora-42-cross-mingw64.Dockerfile +++ b/ci/containers/fedora-43-cross-mingw64.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:42 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/containers/fedora-41.Dockerfile b/ci/containers/fedora-43.Dockerfile similarity index 98% rename from ci/containers/fedora-41.Dockerfile rename to ci/containers/fedora-43.Dockerfile index 89732dd529..55f68a5839 100644 --- a/ci/containers/fedora-41.Dockerfile +++ b/ci/containers/fedora-43.Dockerfile @@ -4,7 +4,7 @@ # # https://gitlab.com/libvirt/libvirt-ci -FROM registry.fedoraproject.org/fedora:41 +FROM registry.fedoraproject.org/fedora:43 RUN dnf install -y nosync && \ printf '#!/bin/sh\n\ diff --git a/ci/gitlab/builds.yml b/ci/gitlab/builds.yml index ae691862c2..42ecccdbcc 100644 --- a/ci/gitlab/builds.yml +++ b/ci/gitlab/builds.yml @@ -33,6 +33,32 @@ x86_64-almalinux-9-clang: TARGET_BASE_IMAGE: docker.io/library/almalinux:9 +x86_64-almalinux-10: + extends: .native_build_job + needs: + - job: x86_64-almalinux-10-container + optional: true + allow_failure: false + variables: + JOB_OPTIONAL: 1 + NAME: almalinux-10 + RPM: skip + TARGET_BASE_IMAGE: docker.io/library/almalinux:10 + + +x86_64-almalinux-10-clang: + extends: .native_build_job + needs: + - job: x86_64-almalinux-10-container + optional: true + allow_failure: false + variables: + CC: clang + NAME: almalinux-10 + RPM: skip + TARGET_BASE_IMAGE: docker.io/library/almalinux:10 + + x86_64-alpine-322: extends: .native_build_job needs: @@ -64,6 +90,17 @@ x86_64-centos-stream-9: variables: NAME: centos-stream-9 TARGET_BASE_IMAGE: quay.io/centos/centos:stream9 + + +x86_64-centos-stream-10: + extends: .native_build_job + needs: + - job: x86_64-centos-stream-10-container + optional: true + allow_failure: false + variables: + NAME: centos-stream-10 + TARGET_BASE_IMAGE: quay.io/centos/centos:stream10 artifacts: expire_in: 1 day paths: @@ -103,21 +140,6 @@ x86_64-debian-sid: TARGET_BASE_IMAGE: docker.io/library/debian:sid-slim -x86_64-fedora-41: - extends: .native_build_job - needs: - - job: x86_64-fedora-41-container - optional: true - allow_failure: false - variables: - NAME: fedora-41 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:41 - artifacts: - expire_in: 1 day - paths: - - libvirt-rpms - - x86_64-fedora-42: extends: .native_build_job needs: @@ -133,6 +155,21 @@ x86_64-fedora-42: - libvirt-rpms +x86_64-fedora-43: + extends: .native_build_job + needs: + - job: x86_64-fedora-43-container + optional: true + allow_failure: false + variables: + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + + x86_64-fedora-rawhide: extends: .native_build_job needs: @@ -416,29 +453,29 @@ s390x-debian-sid: TARGET_BASE_IMAGE: docker.io/library/debian:sid-slim -mingw32-fedora-42: +mingw32-fedora-43: extends: .cross_build_job needs: - - job: mingw32-fedora-42-container + - job: mingw32-fedora-43-container optional: true allow_failure: false variables: CROSS: mingw32 JOB_OPTIONAL: 1 - NAME: fedora-42 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:42 + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 -mingw64-fedora-42: +mingw64-fedora-43: extends: .cross_build_job needs: - - job: mingw64-fedora-42-container + - job: mingw64-fedora-43-container optional: true allow_failure: false variables: CROSS: mingw64 - NAME: fedora-42 - TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:42 + NAME: fedora-43 + TARGET_BASE_IMAGE: registry.fedoraproject.org/fedora:43 mingw32-fedora-rawhide: diff --git a/ci/gitlab/containers.yml b/ci/gitlab/containers.yml index 0650e4781c..56b974f2a1 100644 --- a/ci/gitlab/containers.yml +++ b/ci/gitlab/containers.yml @@ -14,6 +14,13 @@ x86_64-almalinux-9-container: NAME: almalinux-9 +x86_64-almalinux-10-container: + extends: .container_job + allow_failure: false + variables: + NAME: almalinux-10 + + x86_64-alpine-322-container: extends: .container_job allow_failure: false @@ -35,6 +42,13 @@ x86_64-centos-stream-9-container: NAME: centos-stream-9 +x86_64-centos-stream-10-container: + extends: .container_job + allow_failure: false + variables: + NAME: centos-stream-10 + + x86_64-debian-12-container: extends: .container_job allow_failure: false @@ -49,13 +63,6 @@ x86_64-debian-sid-container: NAME: debian-sid -x86_64-fedora-41-container: - extends: .container_job - allow_failure: false - variables: - NAME: fedora-41 - - x86_64-fedora-42-container: extends: .container_job allow_failure: false @@ -63,6 +70,13 @@ x86_64-fedora-42-container: NAME: fedora-42 +x86_64-fedora-43-container: + extends: .container_job + allow_failure: false + variables: + NAME: fedora-43 + + x86_64-fedora-rawhide-container: extends: .container_job allow_failure: true @@ -220,19 +234,19 @@ s390x-debian-sid-container: NAME: debian-sid-cross-s390x -mingw32-fedora-42-container: +mingw32-fedora-43-container: extends: .container_job allow_failure: false variables: JOB_OPTIONAL: 1 - NAME: fedora-42-cross-mingw32 + NAME: fedora-43-cross-mingw32 -mingw64-fedora-42-container: +mingw64-fedora-43-container: extends: .container_job allow_failure: false variables: - NAME: fedora-42-cross-mingw64 + NAME: fedora-43-cross-mingw64 mingw32-fedora-rawhide-container: diff --git a/ci/integration.yml b/ci/integration.yml index 2c5e5a65bc..b7e301b4c0 100644 --- a/ci/integration.yml +++ b/ci/integration.yml @@ -29,23 +29,23 @@ centos-stream-9-tests: # and libvirt-python CI jobs, so the new target needs to be introduced # there before it can be used here. The VM template for the target # also needs to be created on the runner host. -fedora-41-tests: +fedora-43-tests: extends: .integration_tests variables: # needed by libvirt-gitlab-executor - DISTRO: fedora-41 + DISTRO: fedora-43 # can be overridden in forks to set a different runner tag LIBVIRT_CI_INTEGRATION_RUNNER_TAG: redhat-vm-host tags: - $LIBVIRT_CI_INTEGRATION_RUNNER_TAG needs: - - x86_64-fedora-41 + - x86_64-fedora-43 - project: libvirt/libvirt-perl - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true - project: libvirt/libvirt-python - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true @@ -53,22 +53,22 @@ fedora-41-tests: # and libvirt-python CI jobs, so the new target needs to be introduced # there before it can be used here. The VM template for the target # also needs to be created on the runner host. -.fedora-41-upstream-qemu-tests: +.fedora-43-upstream-qemu-tests: extends: .integration_tests variables: # needed by libvirt-gitlab-executor - DISTRO: fedora-41 + DISTRO: fedora-43 # can be overridden in forks to set a different runner tag LIBVIRT_CI_INTEGRATION_RUNNER_TAG: redhat-vm-host tags: - $LIBVIRT_CI_INTEGRATION_RUNNER_TAG needs: - - x86_64-fedora-41 + - x86_64-fedora-43 - project: libvirt/libvirt-perl - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true - project: libvirt/libvirt-python - job: x86_64-fedora-41 + job: x86_64-fedora-43 ref: master artifacts: true diff --git a/ci/manifest.yml b/ci/manifest.yml index 21d570cb00..dad7e4ba3a 100644 --- a/ci/manifest.yml +++ b/ci/manifest.yml @@ -19,6 +19,19 @@ targets: RPM: skip CC: clang + almalinux-10: + jobs: + - arch: x86_64 + builds: false + variables: + RPM: skip + + - arch: x86_64 + suffix: -clang + variables: + RPM: skip + CC: clang + alpine-322: x86_64 alpine-edge: @@ -27,6 +40,10 @@ targets: allow-failure: true centos-stream-9: + jobs: + - arch: x86_64 + + centos-stream-10: jobs: - arch: x86_64 artifacts: @@ -104,14 +121,6 @@ targets: containers: false builds: false - fedora-41: - jobs: - - arch: x86_64 - artifacts: - expire_in: 1 day - paths: - - libvirt-rpms - fedora-42: jobs: - arch: x86_64 @@ -120,6 +129,14 @@ targets: paths: - libvirt-rpms + fedora-43: + jobs: + - arch: x86_64 + artifacts: + expire_in: 1 day + paths: + - libvirt-rpms + - arch: mingw32 builds: false -- 2.51.2

2 1

[PATCH v2 00/22] conf: qemu: Use automatic memory management
by Kirill Shchetiniuk 25 Nov '25

25 Nov '25

Refactored the code to use GLib automatic memory management capabilities. Added macros to enable the g_autoptr capability for some structures. Removed prevosly defined cleanup stages, as now it is not required. Moved some variables to closer scope, to enbale auto memory management capability for it. Changes: v2: Split the commits to individual functions Kirill Shchetiniuk (22): virQEMUCapsKVMSupportsNesting: Use automatic memory management qemuDomainSetVcpusAgent: Use automatic memory management qemuDomainGetHostnameLease: Use automatic memory management qemuProcessRefreshChannelVirtioState: Use automatic memory management qemuMigrationSrcPerformPeer2Peer2: Use automatic memory management qemuDomainMasterKeyReadFile: Use automatic memory management qemuDomainObjPrivateXMLParse: Use automatic memory management qemuDomainGetGuestVcpus: Use automatic memory management qemuDomainSetGuestVcpus: Use automatic memory management qemuMonitorInitBalloonObjectPath: Use automatic memory management qemuMonitorMigrateToHost: Use automatic memory management qemuMigrationAnyParseURI: Use automatic memory management qemuMigrationAnyPrepareDef: Use automatic memory management qemuMigrationSrcIOFunc: Use automatic memory management qemuMigrationSrcStartTunnel: Use automatic memory management qemuMigrationSrcToLegacyFile: Use automatic memory management virDomainGraphicsDefNew: Use automatic memory management virDomainTPMDefNew: Use automatic memory management virDomainVideoDefNew: Use automatic memory management virDomainIdmapDefParseXML: Use automatic memory management virDomainNetAppendIPAddress: Use automatic memory management virDomainChrDefNew: Use automatic memory management src/conf/domain_conf.c | 35 ++++++++++++------------------ src/conf/domain_conf.h | 2 ++ src/datatypes.h | 1 + src/qemu/qemu_capabilities.c | 6 +++--- src/qemu/qemu_domain.c | 15 ++++++------- src/qemu/qemu_driver.c | 33 +++++++++++------------------ src/qemu/qemu_migration.c | 41 +++++++++++++----------------------- src/qemu/qemu_monitor.c | 6 ++---- src/qemu/qemu_process.c | 7 +++--- 9 files changed, 58 insertions(+), 88 deletions(-) -- 2.49.0

1 22

[PATCH 0/7] conf: qemu: Use automatic memory management
by Kirill Shchetiniuk 25 Nov '25

25 Nov '25

Refactored the code to use GLib automatic memory management capabilities. Added macros to enable the g_autoptr capability for some structures. Removed prevosly defined cleanup stages, as now it is not required. Moved some variables to closer scope, to enbale auto memory management capability for some variables. Kirill Shchetiniuk (7): conf: Use automatic memory management qemu: Use automatic memory management virQEMUCapsKVMSupportsNesting: Use automatic memory management qemuDomainSetVcpusAgent: Use automatic memory management qemuDomainGetHostnameLease: Use automatic memory management qemuProcessRefreshChannelVirtioState: Use automatic memory management qemuMigrationSrcPerformPeer2Peer2: Use automatic memory management src/conf/domain_conf.c | 35 +++++++++++++------------------- src/conf/domain_conf.h | 2 ++ src/datatypes.h | 1 + src/qemu/qemu_capabilities.c | 6 +++--- src/qemu/qemu_domain.c | 15 ++++++-------- src/qemu/qemu_driver.c | 33 +++++++++++------------------- src/qemu/qemu_migration.c | 39 +++++++++++++----------------------- src/qemu/qemu_monitor.c | 6 ++---- src/qemu/qemu_process.c | 7 +++---- 9 files changed, 57 insertions(+), 87 deletions(-) -- 2.49.0

2 9

[PATCH 0/4] qemucapabilitiestest: Update x86_64 caps, prepare
by Peter Krempa 25 Nov '25

25 Nov '25

Patch 1 updates the x86_64 dump to last state. Patches 2,3 get rid of explicit use of virt-4.0 and 4.2 machines on aarch64 which will be dropped. Patch 4 adds a dev-cycle dump for aarch64 collected on a raspberry pi. Normally I wouldn't add one so close to the release but Jano asked me for some of his patches. Treat patch 4 as RFC. Additionally if anyone wants to contribute dump from a better machine please do so. Peter Krempa (4): qemucapabilitiestest: qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.2.0-rc1-38-gfb241d0a1f' qemuxmlconftest: Update 'aarch64' tests using 'virt-4.0' machine type qemuxmlconftest: Update 'aarch64' tests using 'virt-4.2' machine type qemucapabilitiestest: Add data for the qemu-10.2 dev cycle for 'aarch64' .../qemu_10.2.0-virt.aarch64.xml | 249 + tests/domaincapsdata/qemu_10.2.0.aarch64.xml | 249 + .../caps_10.2.0_aarch64.replies | 39126 ++++++++++++++++ .../caps_10.2.0_aarch64.xml | 530 + .../caps_10.2.0_x86_64.replies | 24 +- .../caps_10.2.0_x86_64.xml | 4 +- ...arch64-cpu-passthrough.aarch64-latest.args | 2 +- ...aarch64-cpu-passthrough.aarch64-latest.xml | 2 +- ...ault-cpu-kvm-virt-10.0.aarch64-latest.args | 35 + ...fault-cpu-kvm-virt-10.0.aarch64-latest.xml | 39 + .../aarch64-default-cpu-kvm-virt-10.0.xml | 20 + ...ault-cpu-kvm-virt-4.2.aarch64-10.0.0.args} | 0 ...fault-cpu-kvm-virt-4.2.aarch64-10.0.0.xml} | 0 ...ault-cpu-tcg-virt-10.0.aarch64-latest.args | 35 + ...fault-cpu-tcg-virt-10.0.aarch64-latest.xml | 39 + .../aarch64-default-cpu-tcg-virt-10.0.xml | 20 + ...ault-cpu-tcg-virt-4.2.aarch64-10.0.0.args} | 0 ...fault-cpu-tcg-virt-4.2.aarch64-10.0.0.xml} | 0 ...aarch64-features-pauth.aarch64-latest.args | 2 +- .../aarch64-features-pauth.aarch64-latest.xml | 2 +- .../aarch64-features-sve.aarch64-latest.args | 2 +- .../aarch64-features-sve.aarch64-latest.xml | 2 +- .../aarch64-features-wrong.aarch64-latest.xml | 2 +- .../aarch64-gic-default.aarch64-latest.args | 2 +- .../aarch64-gic-default.aarch64-latest.xml | 2 +- .../aarch64-gic-none.aarch64-latest.args | 2 +- .../aarch64-gic-none.aarch64-latest.xml | 2 +- .../aarch64-kvm-32-on-64.aarch64-latest.args | 2 +- .../aarch64-kvm-32-on-64.aarch64-latest.xml | 2 +- .../aarch64-pci-serial.aarch64-latest.args | 1 - .../aarch64-pci-serial.aarch64-latest.xml | 3 - ...arch64-traditional-pci.aarch64-latest.args | 1 - ...aarch64-traditional-pci.aarch64-latest.xml | 3 - ...aarch64-usb-controller.aarch64-latest.args | 1 - .../aarch64-usb-controller.aarch64-latest.xml | 3 - ...ault-models.aarch64-latest.abi-update.args | 1 - ...fault-models.aarch64-latest.abi-update.xml | 3 - ...64-virt-default-models.aarch64-latest.args | 1 - ...h64-virt-default-models.aarch64-latest.xml | 3 - .../aarch64-virt-graphics.aarch64-latest.args | 3 +- .../aarch64-virt-graphics.aarch64-latest.xml | 5 +- .../qemuxmlconfdata/aarch64-virt-graphics.xml | 2 +- ...h64-virt-headless-mmio.aarch64-latest.args | 3 +- ...ch64-virt-headless-mmio.aarch64-latest.xml | 5 +- .../aarch64-virt-headless-mmio.xml | 2 +- .../aarch64-virt-headless.aarch64-latest.args | 3 +- .../aarch64-virt-headless.aarch64-latest.xml | 5 +- .../qemuxmlconfdata/aarch64-virt-headless.xml | 2 +- ...irt-minimal.aarch64-latest.abi-update.args | 1 - ...virt-minimal.aarch64-latest.abi-update.xml | 3 - .../aarch64-virt-minimal.aarch64-latest.args | 1 - .../aarch64-virt-minimal.aarch64-latest.xml | 3 - .../arm-vexpressa9-basic.aarch64-latest.args | 1 + .../arm-vexpressa9-basic.aarch64-latest.xml | 3 + .../arm-vexpressa9-nodevs.aarch64-latest.args | 1 + .../arm-vexpressa9-nodevs.aarch64-latest.xml | 3 + .../arm-vexpressa9-virtio.aarch64-latest.args | 1 + .../arm-vexpressa9-virtio.aarch64-latest.xml | 3 + .../cpu-topology5.aarch64-latest.args | 1 - .../cpu-topology5.aarch64-latest.xml | 3 +- ...ult-video-type-aarch64.aarch64-latest.args | 2 +- ...ault-video-type-aarch64.aarch64-latest.xml | 2 +- .../disk-arm-virtio-sd.aarch64-latest.args | 1 + .../disk-arm-virtio-sd.aarch64-latest.xml | 3 + ...efi-aarch64.aarch64-latest.abi-update.args | 3 +- ...-efi-aarch64.aarch64-latest.abi-update.xml | 5 +- ...mware-auto-efi-aarch64.aarch64-latest.args | 3 +- ...rmware-auto-efi-aarch64.aarch64-latest.xml | 5 +- .../firmware-auto-efi-aarch64.xml | 2 +- ...-loader-raw.aarch64-latest.abi-update.args | 3 +- ...t-loader-raw.aarch64-latest.abi-update.xml | 5 +- ...-efi-format-loader-raw.aarch64-latest.args | 3 +- ...o-efi-format-loader-raw.aarch64-latest.xml | 5 +- .../firmware-auto-efi-format-loader-raw.xml | 2 +- ...i-aarch64-legacy-paths.aarch64-latest.args | 3 +- ...fi-aarch64-legacy-paths.aarch64-latest.xml | 5 +- ...rmware-manual-efi-aarch64-legacy-paths.xml | 2 +- ...anual-efi-acpi-aarch64.aarch64-latest.args | 3 +- ...manual-efi-acpi-aarch64.aarch64-latest.xml | 5 +- .../firmware-manual-efi-acpi-aarch64.xml | 2 +- ...ual-efi-noacpi-aarch64.aarch64-latest.args | 3 +- ...nual-efi-noacpi-aarch64.aarch64-latest.xml | 5 +- .../firmware-manual-efi-noacpi-aarch64.xml | 2 +- .../firmware-manual-noefi-acpi-aarch64.xml | 2 +- ...l-noefi-noacpi-aarch64.aarch64-latest.args | 3 +- ...al-noefi-noacpi-aarch64.aarch64-latest.xml | 5 +- .../firmware-manual-noefi-noacpi-aarch64.xml | 2 +- .../iommu-smmuv3-pci-bus.aarch64-latest.args | 1 - .../iommu-smmuv3-pci-bus.aarch64-latest.xml | 3 - .../iommu-smmuv3.aarch64-latest.args | 1 - .../iommu-smmuv3.aarch64-latest.xml | 3 - ...ch-virt-console-native.aarch64-latest.args | 1 - ...ach-virt-console-native.aarch64-latest.xml | 3 - ...ch-virt-console-virtio.aarch64-latest.args | 1 - ...ach-virt-console-virtio.aarch64-latest.xml | 3 - ...-serial+console-native.aarch64-latest.args | 1 - ...t-serial+console-native.aarch64-latest.xml | 3 - ...ach-virt-serial-compat.aarch64-latest.args | 1 - ...mach-virt-serial-compat.aarch64-latest.xml | 3 - ...ach-virt-serial-native.aarch64-latest.args | 1 - ...mach-virt-serial-native.aarch64-latest.xml | 3 - .../mach-virt-serial-pci.aarch64-latest.args | 1 - .../mach-virt-serial-pci.aarch64-latest.xml | 3 - .../mach-virt-serial-usb.aarch64-latest.args | 1 - .../mach-virt-serial-usb.aarch64-latest.xml | 3 - ...e-expander-bus-aarch64.aarch64-latest.args | 1 - ...ie-expander-bus-aarch64.aarch64-latest.xml | 3 - .../pcihole64-virt.aarch64-latest.args | 1 - .../pcihole64-virt.aarch64-latest.xml | 3 - .../pvpanic-pci-aarch64.aarch64-latest.args | 1 - .../pvpanic-pci-aarch64.aarch64-latest.xml | 3 - ...pci-no-address-aarch64.aarch64-latest.args | 1 - ...-pci-no-address-aarch64.aarch64-latest.xml | 3 - ...automatic-virt-aarch64.aarch64-latest.args | 1 - ...-automatic-virt-aarch64.aarch64-latest.xml | 3 - ...-fallback-virt-aarch64.aarch64-latest.args | 1 - ...t-fallback-virt-aarch64.aarch64-latest.xml | 3 - ...r-default-virt-aarch64.aarch64-latest.args | 1 - ...er-default-virt-aarch64.aarch64-latest.xml | 3 - .../virtio-iommu-aarch64.aarch64-latest.args | 1 - .../virtio-iommu-aarch64.aarch64-latest.xml | 3 - tests/qemuxmlconftest.c | 6 +- 122 files changed, 40428 insertions(+), 202 deletions(-) create mode 100644 tests/domaincapsdata/qemu_10.2.0-virt.aarch64.xml create mode 100644 tests/domaincapsdata/qemu_10.2.0.aarch64.xml create mode 100644 tests/qemucapabilitiesdata/caps_10.2.0_aarch64.replies create mode 100644 tests/qemucapabilitiesdata/caps_10.2.0_aarch64.xml create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-kvm-virt-10.0.aarch64-latest.args create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-kvm-virt-10.0.aarch64-latest.xml create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-kvm-virt-10.0.xml rename tests/qemuxmlconfdata/{aarch64-default-cpu-kvm-virt-4.2.aarch64-latest.args => aarch64-default-cpu-kvm-virt-4.2.aarch64-10.0.0.args} (100%) rename tests/qemuxmlconfdata/{aarch64-default-cpu-kvm-virt-4.2.aarch64-latest.xml => aarch64-default-cpu-kvm-virt-4.2.aarch64-10.0.0.xml} (100%) create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-tcg-virt-10.0.aarch64-latest.args create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-tcg-virt-10.0.aarch64-latest.xml create mode 100644 tests/qemuxmlconfdata/aarch64-default-cpu-tcg-virt-10.0.xml rename tests/qemuxmlconfdata/{aarch64-default-cpu-tcg-virt-4.2.aarch64-latest.args => aarch64-default-cpu-tcg-virt-4.2.aarch64-10.0.0.args} (100%) rename tests/qemuxmlconfdata/{aarch64-default-cpu-tcg-virt-4.2.aarch64-latest.xml => aarch64-default-cpu-tcg-virt-4.2.aarch64-10.0.0.xml} (100%) -- 2.51.1

3 11

[PATCH v3] spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer
by Peter Krempa 25 Nov '25

25 Nov '25

From: Peter Krempa <pkrempa(a)redhat.com> On Fedora 43 and newer the 'fuse-zfs' package was removed. Commit bd30147e740 added an 'Obsoletes' directive so that the storage driver core package will update properly but hardcoded the obsoleted version as 11.4 (when the change was comitted) similarly to the old sheepdog/rbd packages and disabled the build. Now it is still possible to obtain ZFS support from other means and it may be useful for users to have libvirt's ZFS backend. This patch thus: - re-enables build of 'libvirt-daemon-driver-storage-zfs' on Fedora - removes 'libvirt-daemon-driver-storage-zfs' as 'Requires dependency from 'daemon-driver-storage' meta-package on Fedora 43 and newer - removes dependancy on '/sbin/zpool' and '/sbin/zfs' on Fedora 43 and newer With this the package still is built and installable but will require users to get their ZFS support installed somehow. Fixes: bd30147e740d49fdb5844160e480ca34611f75e5 Signed-off-by: Peter Krempa <pkrempa(a)redhat.com> --- libvirt.spec.in | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) Remove the dependency on the programs too. diff --git a/libvirt.spec.in b/libvirt.spec.in index 8314fbeb34..62af7fb517 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -76,8 +76,10 @@ %define with_storage_gluster 0 %endif -# Fedora had zfs-fuse until F43 -%if 0%{?fedora} && 0%{?fedora} < 43 +# On Fedora 43, the 'zfs-fuse' package was removed, but is obtainable via +# other means. Build the backend, but it's no longer considered to be part +# of 'daemon-driver-storage'. +%if 0%{?fedora} %define with_storage_zfs 0%{!?_without_storage_zfs:1} %else %define with_storage_zfs 0 @@ -667,9 +669,6 @@ Requires: /usr/bin/qemu-img Obsoletes: libvirt-daemon-driver-storage-rbd < 5.2.0 %endif Obsoletes: libvirt-daemon-driver-storage-sheepdog < 8.8.0 - %if !%{with_storage_zfs} -Obsoletes: libvirt-daemon-driver-storage-zfs < 11.4.0 - %endif %description daemon-driver-storage-core The storage driver plugin for the libvirtd daemon, providing @@ -770,9 +769,13 @@ volumes using the ceph protocol. Summary: Storage driver plugin for ZFS Requires: libvirt-daemon-driver-storage-core = %{version}-%{release} Requires: libvirt-libs = %{version}-%{release} -# Support any conforming implementation of zfs +# Starting with Fedora 43 the 'zfs-fuse' is no longer shipped but obtainable +# externally. The package builds fine without these. Users will have to provide +# their own implementation. + %if 0%{?fedora} && 0%{?fedora} < 43 Requires: /sbin/zfs Requires: /sbin/zpool + %endif %description daemon-driver-storage-zfs The storage driver backend adding implementation of the storage APIs for @@ -796,7 +799,10 @@ Requires: libvirt-daemon-driver-storage-gluster = %{version}-%{release} %if %{with_storage_rbd} Requires: libvirt-daemon-driver-storage-rbd = %{version}-%{release} %endif - %if %{with_storage_zfs} +# Starting with Fedora 43 the 'zfs-fuse' is no longer shipped but obtainable +# externally. We do not want to install this as part of 'daemon-driver-storage' +# any more. + %if %{with_storage_zfs} && 0%{?fedora} && 0%{?fedora} < 43 Requires: libvirt-daemon-driver-storage-zfs = %{version}-%{release} %endif -- 2.51.1

3 4

[PATCH] src: fix incorrect build conditional for KVM MSR code
by Daniel P. Berrangé 25 Nov '25

25 Nov '25

From: Daniel P. Berrangé <berrange(a)redhat.com> The condition WITH_LINUX_KVM_H && (defined(__linux__) || defined(__FreeBSD__)) is redundant. If the meson check for linux/kvm.h succeeded, we must be on a Linux host and cannot be on a FreeBSD host. Remove these redundant OS conditions from the MSR code. Signed-off-by: Daniel P. Berrangé <berrange(a)redhat.com> --- src/util/virhostcpu.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/src/util/virhostcpu.c b/src/util/virhostcpu.c index c3b4f87de1..09395ddb04 100644 --- a/src/util/virhostcpu.c +++ b/src/util/virhostcpu.c @@ -1328,8 +1328,7 @@ virHostCPUGetMicrocodeVersion(virArch hostArch G_GNUC_UNUSED) #if WITH_LINUX_KVM_H && defined(KVM_GET_MSRS) && \ - (defined(__i386__) || defined(__x86_64__)) && \ - (defined(__linux__) || defined(__FreeBSD__)) + (defined(__i386__) || defined(__x86_64__)) static int virHostCPUGetMSRFromKVM(unsigned long index, uint64_t *result) @@ -1585,8 +1584,7 @@ virHostCPUGetTscInfo(void) } #endif /* WITH_LINUX_KVM_H && defined(KVM_GET_MSRS) && \ - (defined(__i386__) || defined(__x86_64__)) && \ - (defined(__linux__) || defined(__FreeBSD__)) */ + (defined(__i386__) || defined(__x86_64__)) */ int virHostCPUReadSignature(virArch arch, -- 2.51.1

2 2

[PATCH 0/2] Validate 'removable' and support 'dpofua' properties of SCSI disks
by Peter Krempa 24 Nov '25

24 Nov '25

Patch 1 adds a missing ABI stability check for 'removable' and patch 2 implements 'dpofua' for SCSI disks. Peter Krempa (2): virDomainDiskDefCheckABIStability: Add missing check for 'removable' property Add support for 'dpofua' setting for SCSI disks docs/formatdomain.rst | 5 ++++ src/conf/domain_conf.c | 23 +++++++++++++++++++ src/conf/domain_conf.h | 1 + src/conf/domain_validate.c | 7 ++++++ src/conf/schemas/domaincommon.rng | 5 ++++ src/qemu/qemu_command.c | 1 + .../disk-scsi.x86_64-latest.args | 4 ++-- .../disk-scsi.x86_64-latest.xml | 4 ++-- tests/qemuxmlconfdata/disk-scsi.xml | 4 ++-- 9 files changed, 48 insertions(+), 6 deletions(-) -- 2.51.1

2 3

[PATCH v2] spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer
by Peter Krempa 24 Nov '25

24 Nov '25

From: Peter Krempa <pkrempa(a)redhat.com> On Fedora 43 and newer the 'fuse-zfs' package was removed. Commit bd30147e740 added an 'Obsoletes' directive so that the storage driver core package will update properly but hardcoded the obsoleted version as 11.4 (when the change was comitted) similarly to the old sheepdog/rbd packages and disabled the build. Now it is still possible to obtain ZFS support from other means and it may be useful for users to have libvirt's ZFS backend. This patch thus: - re-enables build of 'libvirt-daemon-driver-storage-zfs' on Fedora - removes 'libvirt-daemon-driver-storage-zfs' as 'Requires dependency from 'daemon-driver-storage' meta-package on Fedora 43 and newer With this the package still is built and installable but will require users to get their ZFS support installed somehow. Fixes: bd30147e740d49fdb5844160e480ca34611f75e5 Signed-off-by: Peter Krempa <pkrempa(a)redhat.com> --- libvirt.spec.in | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) I originally thought that the 'Requires' dependancy requiring /sbin/zpool and /sbin/zfs would need to be dropped but even without 'zfs-fuse' on F43 it builds fine. diff --git a/libvirt.spec.in b/libvirt.spec.in index 8314fbeb34..1bfe7d715b 100644 --- a/libvirt.spec.in +++ b/libvirt.spec.in @@ -76,8 +76,10 @@ %define with_storage_gluster 0 %endif -# Fedora had zfs-fuse until F43 -%if 0%{?fedora} && 0%{?fedora} < 43 +# On Fedora 43, the 'zfs-fuse' package was removed, but is obtainable via +# other means. Build the backend, but it's no longer considered to be part +# of 'daemon-driver-storage'. +%if 0%{?fedora} %define with_storage_zfs 0%{!?_without_storage_zfs:1} %else %define with_storage_zfs 0 @@ -667,9 +669,6 @@ Requires: /usr/bin/qemu-img Obsoletes: libvirt-daemon-driver-storage-rbd < 5.2.0 %endif Obsoletes: libvirt-daemon-driver-storage-sheepdog < 8.8.0 - %if !%{with_storage_zfs} -Obsoletes: libvirt-daemon-driver-storage-zfs < 11.4.0 - %endif %description daemon-driver-storage-core The storage driver plugin for the libvirtd daemon, providing @@ -796,7 +795,10 @@ Requires: libvirt-daemon-driver-storage-gluster = %{version}-%{release} %if %{with_storage_rbd} Requires: libvirt-daemon-driver-storage-rbd = %{version}-%{release} %endif - %if %{with_storage_zfs} +# Starting with Fedora 43 the 'zfs-fuse' is no longer shipped but obtainable +# externally. We do not want to install this as part of 'daemon-driver-storage' +# any more. + %if %{with_storage_zfs} && 0%{?fedora} && 0%{?fedora} < 43 Requires: libvirt-daemon-driver-storage-zfs = %{version}-%{release} %endif -- 2.51.1

2 1