- Devel - libvirt List Archives

[libvirt] [PATCH] PHYP: Add rudimentary network driver
by Eduardo Otubo 14 Aug '10

14 Aug '10

I changed virStorage[Open|Close] to virVIOSDriver[Open|Close] so the network driver can use it - since the network driver deals with Open/Close in the same way. --- src/phyp/phyp_driver.c | 33 +++++++++++++++++++++++++++++---- 1 files changed, 29 insertions(+), 4 deletions(-) diff --git a/src/phyp/phyp_driver.c b/src/phyp/phyp_driver.c index aa4722e..975d941 100644 --- a/src/phyp/phyp_driver.c +++ b/src/phyp/phyp_driver.c @@ -3864,7 +3864,7 @@ phypDomainSetCPU(virDomainPtr dom, unsigned int nvcpus) } static virDrvOpenStatus -phypStorageOpen(virConnectPtr conn, +phypVIOSDriverOpen(virConnectPtr conn, virConnectAuthPtr auth ATTRIBUTE_UNUSED, int flags) { @@ -3877,7 +3877,7 @@ phypStorageOpen(virConnectPtr conn, } static int -phypStorageClose(virConnectPtr conn ATTRIBUTE_UNUSED) +phypVIOSDriverClose(virConnectPtr conn ATTRIBUTE_UNUSED) { return 0; } @@ -3984,8 +3984,8 @@ static virDriver phypDriver = { static virStorageDriver phypStorageDriver = { .name = "PHYP", - .open = phypStorageOpen, - .close = phypStorageClose, + .open = phypVIOSDriverOpen, + .close = phypVIOSDriverClose, .numOfPools = phypNumOfStoragePools, .listPools = phypListStoragePools, @@ -4023,6 +4023,29 @@ static virStorageDriver phypStorageDriver = { .poolIsPersistent = NULL }; +static virNetworkDriver phypNetworkDriver = { + .name = "PHYP", + .open = phypVIOSDriverOpen, + .close = phypVIOSDriverClose, + .numOfNetworks = NULL, + .listNetworks = NULL, + .numOfDefinedNetworks = NULL, + .listDefinedNetworks = NULL, + .networkLookupByUUID = NULL, + .networkLookupByName = NULL, + .networkCreateXML = NULL, + .networkDefineXML = NULL, + .networkUndefine = NULL, + .networkCreate = NULL, + .networkDestroy = NULL, + .networkDumpXML = NULL, + .networkGetBridgeName = NULL, + .networkGetAutostart = NULL, + .networkSetAutostart = NULL, + .networkIsActive = NULL, + .networkIsPersistent = NULL +}; + int phypRegister(void) { @@ -4030,6 +4053,8 @@ phypRegister(void) return -1; if (virRegisterStorageDriver(&phypStorageDriver) < 0) return -1; + if (virRegisterNetworkDriver(&phypNetworkDriver) < 0) + return -1; return 0; } -- 1.7.0.4

2 1

[libvirt] [PATCH 2/3] Make umlConnectTapDevice ask brAddTap for a persistent tap device.
by Soren Hansen 14 Aug '10

14 Aug '10

This patch does two things: * It makes umlConnectTapDevice ask brAddTap for a persistent tap by passing it a NULL tapfd argument. * Stops umlConnectTapDevice from immediately dismantling the bridge it just set up. Signed-off-by: Soren Hansen <soren(a)linux2go.dk> --- src/uml/uml_conf.c | 6 +----- 1 files changed, 1 insertions(+), 5 deletions(-) diff --git a/src/uml/uml_conf.c b/src/uml/uml_conf.c index bc8cbce..06543cb 100644 --- a/src/uml/uml_conf.c +++ b/src/uml/uml_conf.c @@ -112,7 +112,6 @@ umlConnectTapDevice(virDomainNetDefPtr net, const char *bridge) { brControl *brctl = NULL; - int tapfd = -1; int template_ifname = 0; int err; unsigned char tapmac[VIR_MAC_BUFLEN]; @@ -140,7 +139,7 @@ umlConnectTapDevice(virDomainNetDefPtr net, &net->ifname, tapmac, 0, - &tapfd))) { + NULL))) { if (err == ENOTSUP) { /* In this particular case, give a better diagnostic. */ umlReportError(VIR_ERR_INTERNAL_ERROR, @@ -164,9 +163,6 @@ umlConnectTapDevice(virDomainNetDefPtr net, VIR_FREE(net->ifname); goto error; } - close(tapfd); - - brShutdown(brctl); return 0; -- 1.7.0.4

4 4

[libvirt] [PATCH 1/3] Close fd's of persistent tap devices
by Soren Hansen 14 Aug '10

14 Aug '10

When passing a NULL tapfd argument to brAddTap, we need to close the fd of the tap device. If we don't, libvirt will keep the fd open indefinitely and renders the the guest unable to configure its side of the tap device. Signed-off-by: Soren Hansen <soren(a)linux2go.dk> --- src/util/bridge.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/src/util/bridge.c b/src/util/bridge.c index 7d0caae..da62c5e 100644 --- a/src/util/bridge.c +++ b/src/util/bridge.c @@ -538,6 +538,8 @@ brAddTap(brControl *ctl, goto error; if (tapfd) *tapfd = fd; + else + close(fd); return 0; error: -- 1.7.0.4

2 1

[libvirt] [PATCH] Make sure all command line arguments get passed to UML
by soren＠linux2go.dk 14 Aug '10

14 Aug '10

From: Soren Hansen <soren(a)linux2go.dk> If umlBuildCommandLineChr fails (e.g. due to an unsupported chardev type), it returns NULL. umlBuildCommandLine does not check for this and sets this as an argument on the comand line, effectively ending the argument list. This patch checks for this case and sets the chardev to "none". Signed-off-by: Soren Hansen <soren(a)linux2go.dk> --- src/uml/uml_conf.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/uml/uml_conf.c b/src/uml/uml_conf.c index 1623a78..42193e4 100644 --- a/src/uml/uml_conf.c +++ b/src/uml/uml_conf.c @@ -511,10 +511,10 @@ int umlBuildCommandLine(virConnectPtr conn, } for (i = 0 ; i < UML_MAX_CHAR_DEVICE ; i++) { - char *ret; + char *ret = NULL; if (i == 0 && vm->def->console) ret = umlBuildCommandLineChr(vm->def->console, "con"); - else + if (!ret) if (virAsprintf(&ret, "con%d=none", i) < 0) goto no_memory; ADD_ARG(ret); @@ -522,13 +522,13 @@ int umlBuildCommandLine(virConnectPtr conn, for (i = 0 ; i < UML_MAX_CHAR_DEVICE ; i++) { virDomainChrDefPtr chr = NULL; - char *ret; + char *ret = NULL; for (j = 0 ; j < vm->def->nserials ; j++) if (vm->def->serials[j]->target.port == i) chr = vm->def->serials[j]; if (chr) ret = umlBuildCommandLineChr(chr, "ssl"); - else + if (!ret) if (virAsprintf(&ret, "ssl%d=none", i) < 0) goto no_memory; ADD_ARG(ret); -- 1.7.0.4

2 1

[libvirt] PATCH 0/4: AppArmor updates
by Jamie Strandboge 13 Aug '10

13 Aug '10

This patchset consists of various small updates to the AppArmor security driver: 0001-apparmor-dont-ignore-open.patch: Exit with error if virDomainDiskDefForeachPath() fails, unless the disk doesn't exist, at which point we skip it without error. Also add several tests to virt-aa-helper-test for '-p' option. 0002-apparmor-chardev.patch: fix serial ports, parallel ports and channels 0003-apparmor-examples.patch: update to example AppArmor profile 0004-apparmor-fix-warn.patch: fix a compiler warning The updates in 0001-apparmor-dont-ignore-open.patch are needed to ensure that it works consistently with and without '-p 1' and that the security fix works as advertised. The other patches should speak for themselves. -- Jamie Strandboge | http://www.canonical.com

1 0

[libvirt] [PATCH v2] nwfilter: Discard class D and E IP addresses when sniffing packets
by Stefan Berger 13 Aug '10

13 Aug '10

V2: Corrected comment and simplified mask to check for class D and E IP addresses When sniffing the network traffic, discard class D and E IP addresses when sniffing traffic. This was a reason why filters were not correctly rebuilt on VMs on the local 192.* network when libvirt was restarted and those VMs did not use a DHCP request to get its IP address. Signed-off-by: Stefan Berger<stefanb(a)us.ibm.com> --- src/nwfilter/nwfilter_learnipaddr.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) Index: libvirt-acl/src/nwfilter/nwfilter_learnipaddr.c =================================================================== --- libvirt-acl.orig/src/nwfilter/nwfilter_learnipaddr.c +++ libvirt-acl/src/nwfilter/nwfilter_learnipaddr.c @@ -546,9 +546,11 @@ learnIPAddressThread(void *arg) struct iphdr *iphdr = (struct iphdr*)(packet + ethHdrSize); vmaddr = iphdr->saddr; - // skip eth. bcast and mcast addresses, - // and zero address in DHCP Requests - if ((ntohl(vmaddr)& 0xc0000000) || vmaddr == 0) { + // skip mcast addresses (224.0.0.0 - 239.255.255.255), + // class E (240.0.0.0 - 255.255.255.255, includes eth. + // bcast) and zero address in DHCP Requests + if ( (ntohl(vmaddr)& 0xe0000000) == 0xe0000000 || + vmaddr == 0) { vmaddr = 0; continue; }

3 2

[libvirt] [PATCH[ nwfilter: Discard class D and E IP addresses when sniffing
by Stefan Berger 13 Aug '10

13 Aug '10

When sniffing the network traffic, discard class D and E IP addresses when sniffing traffic. This was a reason why filters were not correctly rebuilt on VMs on the local 192.* network when libvirt was restarted and those VMs did not use a DHCP request to get its IP address. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com> --- src/nwfilter/nwfilter_learnipaddr.c | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) Index: libvirt-acl/src/nwfilter/nwfilter_learnipaddr.c =================================================================== --- libvirt-acl.orig/src/nwfilter/nwfilter_learnipaddr.c +++ libvirt-acl/src/nwfilter/nwfilter_learnipaddr.c @@ -546,9 +546,12 @@ learnIPAddressThread(void *arg) struct iphdr *iphdr = (struct iphdr*)(packet + ethHdrSize); vmaddr = iphdr->saddr; - // skip eth. bcast and mcast addresses, + // skip eth. bcast and mcast addresses (224.0.0.0 - + // 239.255.255.255), class E (255.*) // and zero address in DHCP Requests - if ((ntohl(vmaddr) & 0xc0000000) || vmaddr == 0) { + if ( (ntohl(vmaddr) & 0xe0000000) == 0xe0000000 || + (ntohl(vmaddr) & 0xf0000000) == 0xf0000000 || + vmaddr == 0) { vmaddr = 0; continue; }

3 4

[libvirt] [PATCH] nwfilter: fix a memory leak
by Stefan Berger 13 Aug '10

13 Aug '10

Fixing a memory leak. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com> --- src/nwfilter/nwfilter_ebiptables_driver.c | 3 +++ 1 file changed, 3 insertions(+) Index: libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c =================================================================== --- libvirt-acl.orig/src/nwfilter/nwfilter_ebiptables_driver.c +++ libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c @@ -2973,6 +2973,9 @@ static int ebtablesCleanAll(const char * ebtablesRemoveTmpRootChain(&buf, 0, ifname); ebiptablesExecCLI(&buf, &cli_status); + + virBufferFreeAndReset(&buf); + return 0; }

3 2

[libvirt] [PATCH] Only require XDR when building libvirtd or the remote driver
by Matthias Bolte 13 Aug '10

13 Aug '10

--- configure.ac | 31 +++++++++++++++++++------------ 1 files changed, 19 insertions(+), 12 deletions(-) diff --git a/configure.ac b/configure.ac index a762bae..764405c 100644 --- a/configure.ac +++ b/configure.ac @@ -111,18 +111,6 @@ dnl Availability of various common headers (non-fatal if missing). AC_CHECK_HEADERS([pwd.h paths.h regex.h sys/syslimits.h \ termios.h sys/poll.h syslog.h mntent.h net/ethernet.h linux/magic.h]) -dnl Where are the XDR functions? -dnl If portablexdr is installed, prefer that. -dnl Otherwise try -lrpc (Cygwin) -lxdr (some MinGW), -lnsl (Solaris) -dnl or none (most Unix) -AC_CHECK_LIB([portablexdr],[xdrmem_create],[],[ - AC_SEARCH_LIBS([xdrmem_create],[rpc xdr nsl],[], - [AC_MSG_ERROR([Cannot find a XDR library])]) - ]) - -dnl check for cygwin's variation in xdr function names -AC_CHECK_FUNCS([xdr_u_int64_t],[],[],[#include <rpc/xdr.h>]) - AC_CHECK_LIB([intl],[gettext],[]) dnl Do we have rpcgen? @@ -319,6 +307,25 @@ AM_CONDITIONAL([WITH_OPENVZ], [test "$with_openvz" = "yes"]) dnl +dnl check for XDR +dnl + +if test x"$with_remote" = x"yes" || test x"$with_libvirtd" = x"yes"; then + dnl Where are the XDR functions? + dnl If portablexdr is installed, prefer that. + dnl Otherwise try -lrpc (Cygwin) -lxdr (some MinGW), -lnsl (Solaris) + dnl or none (most Unix) + AC_CHECK_LIB([portablexdr],[xdrmem_create],[],[ + AC_SEARCH_LIBS([xdrmem_create],[rpc xdr nsl],[], + [AC_MSG_ERROR([Cannot find a XDR library])]) + ]) + + dnl check for cygwin's variation in xdr function names + AC_CHECK_FUNCS([xdr_u_int64_t],[],[],[#include <rpc/xdr.h>]) +fi + + +dnl dnl check for VirtualBox XPCOMC location dnl -- 1.7.0.4

2 2

[libvirt] [PATCH] nwfilter: serialize execution of scripts with ebtables cmds
by Stefan Berger 13 Aug '10

13 Aug '10

While testing the SIGHUP handling and reloading of the nwfilter driver, I found that when the filters are rebuilt and mutlipe threads handled the individual interfaces, concurrently running multiple external bash scripts causes strange failures even though the executed ebtables commands are working on different tables for different interfaces. I cannot say for sure where the concurrency problems are caused, but introducing this lock definitely helps. Signed-off-by: Stefan Berger <stefanb(a)us.ibm.com> --- src/nwfilter/nwfilter_ebiptables_driver.c | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-) Index: libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c =================================================================== --- libvirt-acl.orig/src/nwfilter/nwfilter_ebiptables_driver.c +++ libvirt-acl/src/nwfilter/nwfilter_ebiptables_driver.c @@ -104,6 +104,7 @@ static int ebiptablesDriverInit(void); static void ebiptablesDriverShutdown(void); static int ebtablesCleanAll(const char *ifname); +static virMutex execCLIMutex; struct ushort_map { unsigned short attr; @@ -2309,8 +2310,13 @@ ebiptablesExecCLI(virBufferPtr buf, return 1; argv[0] = filename; + + virMutexLock(&execCLIMutex); + rc = virRun(argv, status); + virMutexUnlock(&execCLIMutex); + *status >>= 8; VIR_DEBUG("rc = %d, status = %d",rc, *status); @@ -3163,8 +3169,9 @@ tear_down_tmpebchains: ebiptablesExecCLI(&buf, &cli_status); virNWFilterReportError(VIR_ERR_BUILD_FIREWALL, - "%s", - _("Some rules could not be created.")); + _("Some rules could not be created for " + "interface %s."), + ifname); return 1; } @@ -3364,6 +3371,9 @@ ebiptablesDriverInit(void) virBuffer buf = VIR_BUFFER_INITIALIZER; int cli_status; + if (virMutexInit(&execCLIMutex)) + return EINVAL; + bash_cmd_path = virFindFileInPath("bash"); gawk_cmd_path = virFindFileInPath("gawk"); grep_cmd_path = virFindFileInPath("grep");

3 2