On Tue, Sep 03, 2019 at 02:26:23PM +0200, Andrea Bolognani wrote:
On Tue, 2019-09-03 at 14:09 +0200, Michal Privoznik wrote:
> Signed-off-by: Michal Privoznik <mprivozn(a)redhat.com>
> ---
> docs/news.xml | 133 ++++++++++++++++++++++++++++++++++++++++++++++++++
> 1 file changed, 133 insertions(+)
>
> diff --git a/docs/news.xml b/docs/news.xml
> index 0c79765fd0..f95af0f0e9 100644
> --- a/docs/news.xml
> +++ b/docs/news.xml
> @@ -50,6 +50,30 @@
[...]
> + <summary>
> + Split libvirtd into separate daemons
> + </summary>
> + <description>
> + The big monolithic libvirtd daemon can now be replaced by smaller
> + per-driver daemons. Distributions can chose if they want the former
> + or the latter. The libvirtd is still kept around for backwards
> + compatibility.
We might want to point out that things like SELinux support and
identity passing are not implemented yet, so distributions will
probably want to hold off using the split daemons by default for a
little while longer... Dan?
Yep, the traditional libvirtd is stil the default.
We should say that the split daemons are "experimental" at this
stage.
> + <summary>
> + Stop linking virt-login-shell and NSS plugins with libvirt.so
> + </summary>
> + <description>
> + In order to allow libvirt abort on out of memory, we need to stop
> + link libvirt.so to virt-login-shell or the NSS plugins where we
don't
In order to allow libvirt to abort on out of memory, we need to stop
linking...
I would not mention OOM abort here, since that's not in this version.
I'd just say that we have simiplified the dependancies of these two
parts to make them self-contained. For the NSS plugin this reduces
amount of code & 3rd party libs loaded into every process For the
login shell this makes the thing simpler to audit for security.
Regards,
Daniel
--
|:
https://berrange.com -o-
https://www.flickr.com/photos/dberrange :|
|:
https://libvirt.org -o-
https://fstop138.berrange.com :|
|:
https://entangle-photo.org -o-
https://www.instagram.com/dberrange :|