Re: [PATCH 0/5] Refresh QEMU caps when CPU microcode changes (Related CVE-2017-5715)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



No description so people might not have realized the implications of this
patch series....

This patch series is a pre-requisite for the future patches that address
the Spectre vulnerability. Those QEMU patches will introduce various new
CPU models. When the Intel microcode update is installed, we need to be
sure that libvirt refreshes its cache of QEMU capabilities and so detects
the new CPU feature bits the microcode added and refreshes its understanding
of QEMU CPU models accordingly. See this series for the new CPU models:

https://www.redhat.com/archives/libvir-list/2018-January/msg00282.html


On Thu, Jan 04, 2018 at 03:58:07PM +0100, Jiri Denemark wrote:
> Jiri Denemark (1):
>   cpu_x86: Rename virCPUx86MapInitialize
> 
> Paolo Bonzini (4):
>   util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD
>   util: introduce virHostCPUGetMicrocodeVersion
>   conf: include x86 microcode version in virsh capabilities
>   qemu: capabilities: force update if the microcode version does not
>     match
> 
>  src/conf/cpu_conf.c                                | 14 +++++++
>  src/conf/cpu_conf.h                                |  1 +
>  src/cpu/cpu_x86.c                                  | 17 +++++++--
>  src/libvirt_private.syms                           |  2 +
>  src/qemu/qemu_capabilities.c                       | 40 +++++++++++++++++++-
>  src/qemu/qemu_capabilities.h                       |  6 ++-
>  src/qemu/qemu_capspriv.h                           |  5 +++
>  src/qemu/qemu_driver.c                             |  9 ++++-
>  src/util/virfile.c                                 | 19 ++++++++++
>  src/util/virfile.h                                 |  2 +
>  src/util/virhostcpu.c                              | 43 ++++++++++++++++++++++
>  src/util/virhostcpu.h                              |  2 +
>  tests/qemucapabilitiesdata/caps_1.2.2.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_1.3.1.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_1.4.2.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_1.5.3.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_1.6.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_1.7.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.1.1.x86_64.xml   |  1 +
>  .../caps_2.10.0-gicv2.aarch64.xml                  |  1 +
>  .../caps_2.10.0-gicv3.aarch64.xml                  |  1 +
>  tests/qemucapabilitiesdata/caps_2.10.0.ppc64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.10.0.s390x.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.10.0.x86_64.xml  |  1 +
>  tests/qemucapabilitiesdata/caps_2.4.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.5.0.x86_64.xml   |  1 +
>  .../caps_2.6.0-gicv2.aarch64.xml                   |  1 +
>  .../caps_2.6.0-gicv3.aarch64.xml                   |  1 +
>  tests/qemucapabilitiesdata/caps_2.6.0.ppc64.xml    |  1 +
>  tests/qemucapabilitiesdata/caps_2.6.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.7.0.s390x.xml    |  1 +
>  tests/qemucapabilitiesdata/caps_2.7.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.8.0.s390x.xml    |  1 +
>  tests/qemucapabilitiesdata/caps_2.8.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiesdata/caps_2.9.0.ppc64.xml    |  1 +
>  tests/qemucapabilitiesdata/caps_2.9.0.s390x.xml    |  1 +
>  tests/qemucapabilitiesdata/caps_2.9.0.x86_64.xml   |  1 +
>  tests/qemucapabilitiestest.c                       | 14 +++++--
>  tests/qemucapsprobe.c                              |  2 +-
>  tests/testutilsqemu.c                              |  2 +-
>  40 files changed, 189 insertions(+), 14 deletions(-)
> 
> -- 
> 2.15.1
> 
> --
> libvir-list mailing list
> libvir-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/libvir-list

Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|

--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list



[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]
  Powered by Linux