On Tue, Jan 03, 2023 at 10:07:45AM -0700, Jim Fehlig wrote:
On 1/2/23 07:53, Andrea Bolognani wrote:
> Remote clients can connect to modular daemons directly as long as
> virt-ssh-helper is available on the server side. As a fallback, nc
> will be used and the connection will go through virtproxyd.
>
> So yeah, nc will only be used when virtproxyd is involved, and so it
> makes sense to move the Recommends to that package instead of
> libvirt-daemon-common.
>
>
> Based on the above, however, I wonder if we should have at least a
> weak dependency on libvirt-daemon-proxy for libvirt-daemon-kvm and
> friends? As things are right now, clients that are more than ~2 years
> old will not be able to connect to the server unless the admin
> manually installs libvirt-daemon-proxy. Are we okay with that?
More specifically, clients prior to commit 3e9b561139 right? I.e., clients
using libvirt 7.4.0 and older. I lean towards the weak dependency but don't
have a strong opinion :-).
I get a bit confused about the exact timeline :) but I believe that
virt-ssh-helper was always able to connect to modular daemons
directly.
So if a client older than 6.9.0 (when virt-ssh-helper was introduced)
tries to connect, it will spawn netcat and go through virtproxyd;
newer clients will spawn virt-ssh-helper if available, which will
route the connection directly to the appropriate modular daemon.
--
Andrea Bolognani / Red Hat / Virtualization