
On Tue, Jan 03, 2023 at 10:07:45AM -0700, Jim Fehlig wrote:
On 1/2/23 07:53, Andrea Bolognani wrote:
Remote clients can connect to modular daemons directly as long as virt-ssh-helper is available on the server side. As a fallback, nc will be used and the connection will go through virtproxyd.
So yeah, nc will only be used when virtproxyd is involved, and so it makes sense to move the Recommends to that package instead of libvirt-daemon-common.
Based on the above, however, I wonder if we should have at least a weak dependency on libvirt-daemon-proxy for libvirt-daemon-kvm and friends? As things are right now, clients that are more than ~2 years old will not be able to connect to the server unless the admin manually installs libvirt-daemon-proxy. Are we okay with that?
More specifically, clients prior to commit 3e9b561139 right? I.e., clients using libvirt 7.4.0 and older. I lean towards the weak dependency but don't have a strong opinion :-).
I get a bit confused about the exact timeline :) but I believe that virt-ssh-helper was always able to connect to modular daemons directly. So if a client older than 6.9.0 (when virt-ssh-helper was introduced) tries to connect, it will spawn netcat and go through virtproxyd; newer clients will spawn virt-ssh-helper if available, which will route the connection directly to the appropriate modular daemon. -- Andrea Bolognani / Red Hat / Virtualization