[PATCH 00/15] news update since v6.9 to v7.0

Han Han (15): news: make SEV attrs 'cbitpos' & 'reducedPhysBits' optional news: support device stats collection for SR-IOV VF hostdev news: virt-aa-helper: allow guest to create hard links for mounted paths news: cpu_map: Add EPYC-Rome cpu model news: cpu: Support for XML validation in cpu comparison news: logging: allow max_len=0 to disable log rollover news: qemu: Set noqueue qdisc for TAP devices news: qemu: Introduce virtio free page reporting feature news: qemu: virtiofs can be used without NUMA nodes news: qemu: Add 'fmode' and 'dmode' options for 9pfs news: Introduce VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE flag news: Introduce "migrate_tls_force" qemu.conf option news: qemu: support kvm-poll-control performance hint news: cpu_map: Add Snowridge cpu model news: qemu: Add support for NFS disk protocol NEWS.rst | 79 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 79 insertions(+) -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 0a34798483..350459266c 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -421,6 +421,13 @@ v6.9.0 (2020-11-02) using ``<interface type='vdpa'>``. The node device APIs also now list and provide XML descriptions for vDPA devices. +* **Improvements** + + * qemu: Make 'cbitpos' & 'reducedPhysBits' attrs optional + + For these attrs of SEV, libvirt will fill them automatically right before + starting the guest. + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

On Tue, Apr 13, 2021 at 03:08:31PM +0800, Han Han wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index 0a34798483..350459266c 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -421,6 +421,13 @@ v6.9.0 (2020-11-02) using ``<interface type='vdpa'>``. The node device APIs also now list and provide XML descriptions for vDPA devices.
+* **Improvements** + + * qemu: Make 'cbitpos' & 'reducedPhysBits' attrs optional + + For these attrs of SEV, libvirt will fill them automatically right before + starting the guest.
better wording IMO: "libvirt probes the underlying platform in order to fill in these SEV attributes automatically before launching a guest." Regards, Erik

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 350459266c..d95308fd94 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -428,6 +428,11 @@ v6.9.0 (2020-11-02) For these attrs of SEV, libvirt will fill them automatically right before starting the guest. + * util: support device stats collection for SR-IOV VF hostdev + + For SR-IOV VF hostdev, now libvirt supports to retrieve device traffic + stats via the API ``virDomainInterfaceStats`` or ``virsh domifstat``. + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index d95308fd94..1ac9b4c9fc 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -433,6 +433,8 @@ v6.9.0 (2020-11-02) For SR-IOV VF hostdev, now libvirt supports to retrieve device traffic stats via the API ``virDomainInterfaceStats`` or ``virsh domifstat``. + * virt-aa-helper: allow guest to create hard links for mounted paths + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

On Tue, Apr 13, 2021 at 15:08:33 +0800, Han Han wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index d95308fd94..1ac9b4c9fc 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -433,6 +433,8 @@ v6.9.0 (2020-11-02) For SR-IOV VF hostdev, now libvirt supports to retrieve device traffic stats via the API ``virDomainInterfaceStats`` or ``virsh domifstat``.
+ * virt-aa-helper: allow guest to create hard links for mounted paths
The description doesn't make sense to me. The guest OS should not be involved in anything related to the apparmor profile. Could you please point to the commit?
+ * **Bug fixes**
* hyperv: ensure WQL queries work in all locales -- 2.31.1

On Tue, Apr 13, 2021 at 3:22 PM Peter Krempa <pkrempa@redhat.com> wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index d95308fd94..1ac9b4c9fc 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -433,6 +433,8 @@ v6.9.0 (2020-11-02) For SR-IOV VF hostdev, now libvirt supports to retrieve device
On Tue, Apr 13, 2021 at 15:08:33 +0800, Han Han wrote: traffic
stats via the API ``virDomainInterfaceStats`` or ``virsh
domifstat``.
+ * virt-aa-helper: allow guest to create hard links for mounted paths
The description doesn't make sense to me. The guest OS should not be involved in anything related to the apparmor profile.
Could you please point to the commit?
The news comes from "5422f60e2f virt-aa-helper: allow hard links for mounts" In my understanding, it means apparmor allows the guest to create hard links on shared file system like 9pfs
+ * **Bug fixes**
* hyperv: ensure WQL queries work in all locales -- 2.31.1

On Wed, Apr 14, 2021 at 15:39:58 +0800, Han Han wrote:
On Tue, Apr 13, 2021 at 3:22 PM Peter Krempa <pkrempa@redhat.com> wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index d95308fd94..1ac9b4c9fc 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -433,6 +433,8 @@ v6.9.0 (2020-11-02) For SR-IOV VF hostdev, now libvirt supports to retrieve device
On Tue, Apr 13, 2021 at 15:08:33 +0800, Han Han wrote: traffic
stats via the API ``virDomainInterfaceStats`` or ``virsh
domifstat``.
+ * virt-aa-helper: allow guest to create hard links for mounted paths
The description doesn't make sense to me. The guest OS should not be involved in anything related to the apparmor profile.
Could you please point to the commit?
The news comes from "5422f60e2f virt-aa-helper: allow hard links for mounts" In my understanding, it means apparmor allows the guest to create hard links on shared file system like 9pfs
That would be a 'bugfix' at best. IMO it's not really worth documenting. If you do think it's worth mentioning, put it into the 'Bug fixes' section and make sure to mention that it's to do with shared filesystems using p9fs, otherwise it's too vague to help anybody.

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 1ac9b4c9fc..1cc8ff6d73 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -421,6 +421,10 @@ v6.9.0 (2020-11-02) using ``<interface type='vdpa'>``. The node device APIs also now list and provide XML descriptions for vDPA devices. + * cpu_map: Add EPYC-Rome cpu model + + The EPYC-Rome is supported in QEMU since ``v5.0.0``. + * **Improvements** * qemu: Make 'cbitpos' & 'reducedPhysBits' attrs optional -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 1cc8ff6d73..a06e998275 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -425,6 +425,14 @@ v6.9.0 (2020-11-02) The EPYC-Rome is supported in QEMU since ``v5.0.0``. + * cpu: Add a flag for XML validation in cpu comparison + + For the APIs ``virConnectCompareCPU`` and + ``virConnectCompareHypervisorCPU``, the flag + ``VIR_CONNECT_COMPARE_CPU_VALIDATE_XML`` is added for XML validation. As for + virsh, use the option ``--validate`` for sub-commmand ``cpu-compare`` or + ``hypervisor-cpu-compare``. + * **Improvements** * qemu: Make 'cbitpos' & 'reducedPhysBits' attrs optional -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index a06e998275..cf40de17e8 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -447,6 +447,10 @@ v6.9.0 (2020-11-02) * virt-aa-helper: allow guest to create hard links for mounted paths + * logging: allow max_len=0 to disable log rollover + + Set ``max_len=0`` in ``virtlogd.conf`` to disable log rollover. + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index cf40de17e8..cbdd38962e 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -451,6 +451,12 @@ v6.9.0 (2020-11-02) Set ``max_len=0`` in ``virtlogd.conf`` to disable log rollover. + * qemu: Set noqueue qdisc for TAP devices + + Set noqueue instead of the former pfifo_fast queue to TAP devices. It will + avoid needless cost of host CPU cycles and improve the performance of the + TAP devices. + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index cbdd38962e..20e8f047de 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -433,6 +433,13 @@ v6.9.0 (2020-11-02) virsh, use the option ``--validate`` for sub-commmand ``cpu-compare`` or ``hypervisor-cpu-compare``. + * qemu: Introduce virtio free page reporting feature + + Introduce the optional attribute ``free-page-reporting`` for virtio + memballoon device. It enables/disables the ability of the QEMU virtio + memory balloon to return unused pages back to the hypervisor. It is + supported since ``QEMU 5.1``. + * **Improvements** * qemu: Make 'cbitpos' & 'reducedPhysBits' attrs optional -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 20e8f047de..b66313ce9c 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -464,6 +464,11 @@ v6.9.0 (2020-11-02) avoid needless cost of host CPU cycles and improve the performance of the TAP devices. + * qemu: virtiofs can be used without NUMA nodes + + Virtiofs is supported for the VM without NUMA nodes but configured with + shared memory. + * **Bug fixes** * hyperv: ensure WQL queries work in all locales -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index b66313ce9c..24e4481874 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -353,6 +353,13 @@ v6.10.0 (2020-12-01) ``virDomainSetVcpus()``, and ``virDomainSetVcpusFlags()`` APIs have been implemented in the Hyper-V driver. + * qemu: Add 'fmode' and 'dmode' options for 9pfs + + Expose QEMU's 9pfs 'fmode' and 'dmode' options via attributes on the + 'filesystem' node in the domain XML. These options control the creation + mode of files and directories, respectively, when using accessmode=mapped. + It requires QEMU 2.10 or above. + * **Improvements** * virsh: Support network disks in ``virsh attach-disk`` -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 24e4481874..fed80b6724 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -360,6 +360,12 @@ v6.10.0 (2020-12-01) mode of files and directories, respectively, when using accessmode=mapped. It requires QEMU 2.10 or above. + * checkpoint: Introduce VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE flag + + Introduce a flag which will allow users to perform hypervisor-specific + validation when redefining the checkpoint metadata. It could be used by + ``virsh checkpoint-create --redefine-validate``. + * **Improvements** * virsh: Support network disks in ``virsh attach-disk`` -- 2.31.1

On Tue, Apr 13, 2021 at 15:08:41 +0800, Han Han wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 6 ++++++ 1 file changed, 6 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index 24e4481874..fed80b6724 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -360,6 +360,12 @@ v6.10.0 (2020-12-01) mode of files and directories, respectively, when using accessmode=mapped. It requires QEMU 2.10 or above.
+ * checkpoint: Introduce VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE flag + + Introduce a flag which will allow users to perform hypervisor-specific + validation when redefining the checkpoint metadata. It could be used by + ``virsh checkpoint-create --redefine-validate``.
NACK, checkpoints as part of incremental backups are still not enabled due to the missing 'blockdev-reopen' capability of qemu, so there's no point in documenting this.

On Tue, Apr 13, 2021 at 3:19 PM Peter Krempa <pkrempa@redhat.com> wrote:
On Tue, Apr 13, 2021 at 15:08:41 +0800, Han Han wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 6 ++++++ 1 file changed, 6 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index 24e4481874..fed80b6724 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -360,6 +360,12 @@ v6.10.0 (2020-12-01) mode of files and directories, respectively, when using accessmode=mapped. It requires QEMU 2.10 or above.
+ * checkpoint: Introduce VIR_DOMAIN_CHECKPOINT_REDEFINE_VALIDATE flag + + Introduce a flag which will allow users to perform hypervisor-specific + validation when redefining the checkpoint metadata. It could be used by + ``virsh checkpoint-create --redefine-validate``.
NACK, checkpoints as part of incremental backups are still not enabled due to the missing 'blockdev-reopen' capability of qemu, so there's no point in documenting this.
OK. I will drop it in the next version

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index fed80b6724..6cf790bc25 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -335,6 +335,11 @@ v6.10.0 (2020-12-01) option is missing are now '1'. This ensures that only legitimate clients access servers, which don't have any additional form of authentication. + * conf: Introduce "migrate_tls_force" qemu.conf option + + Add this administrative knob to force use the VIR_MIGRATE_TLS flag with + migration, in case of sensitive information leak. + * **New features** * qemu: Implement OpenSSH authorized key file management APIs -- 2.31.1

On Tue, Apr 13, 2021 at 15:08:42 +0800, Han Han wrote:
Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 5 +++++ 1 file changed, 5 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index fed80b6724..6cf790bc25 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -335,6 +335,11 @@ v6.10.0 (2020-12-01) option is missing are now '1'. This ensures that only legitimate clients access servers, which don't have any additional form of authentication.
+ * conf: Introduce "migrate_tls_force" qemu.conf option
The we use 'conf' usually for VM configuration.
+ + Add this administrative knob to force use the VIR_MIGRATE_TLS flag with + migration, in case of sensitive information leak.
I'd word it as: The ``migrate_tls_force`` configuration option allows administrators to always force migration connections to be TLS secured as if ``VIR_MIGRATE_TLS`` flag was used.
+ * **New features**
* qemu: Implement OpenSSH authorized key file management APIs -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 6cf790bc25..3e2ce2cad5 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -371,6 +371,11 @@ v6.10.0 (2020-12-01) validation when redefining the checkpoint metadata. It could be used by ``virsh checkpoint-create --redefine-validate``. + * qemu: support kvm-poll-control performance hint + + Implement the new KVM feature 'poll-control' to set this performance hint + for KVM guests. It requires QEMU 4.2 or above. + * **Improvements** * virsh: Support network disks in ``virsh attach-disk`` -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 3e2ce2cad5..62cec81f0b 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -245,6 +245,10 @@ v7.0.0 (2021-01-15) powered off or undefined. Add per-TPM emulator option ``persistent_state`` for keeping TPM state. + * cpu_map: Add Snowridge cpu model + + The cpu model Snowridge is supported since QEMU 4.1. + * **Improvements** * qemu: Discourage users from polling ``virDomainGetBlockJobInfo`` for block -- 2.31.1

Signed-off-by: Han Han <hhan@redhat.com> --- NEWS.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 62cec81f0b..4e20f34a11 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -249,6 +249,10 @@ v7.0.0 (2021-01-15) The cpu model Snowridge is supported since QEMU 4.1. + * qemu: Add support for NFS disk protocol + + Implement support for the 'nfs' native protocol driver in the qemu driver. + * **Improvements** * qemu: Discourage users from polling ``virDomainGetBlockJobInfo`` for block -- 2.31.1
participants (3)
-
Erik Skultety
-
Han Han
-
Peter Krempa