As planned I tagged the git tree earlier today and pushed tarballs and
rpms to the usual place:
ftp://libvirt.org/libvirt/
The release is a bit smaller than usual in terms of commited patches
probably due to a large part of the team travelling to KVM Forum !
This is mostly a bug fix and maintainance release, it includes 4
important security patches in addition to the usual set of bug and
leak fixes. To note the added support for ARM 64 bits arch, and quite
a large set of portability fixes:
Features:
- Add support for AArch64 architecture (Pranavkumar Sawargaonkar)
- Various improvements on test code and test driver (many people)
Security:
- Don't link virt-login-shell against libvirt.so (CVE-2013-4400) (Daniel P. Berrange)
- Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) (Daniel P. Berrange)
- Only allow 'stderr' log output when running setuid (CVE-2013-4400) (Daniel P. Berrange)
- Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) (Daniel P. Berrange)
Documentation:
- generate links from plain text documentation (Claudio Bley)
- define style of code blocks inside descriptions (Claudio Bley)
- add class "description" to div's containing descriptions (Claudio Bley)
- process code blocks similar to Markdown (Claudio Bley)
- fix typos in formatnwfilter (Chen Hanxiao)
- fix a typo in formatdomain (Chen Hanxiao)
- virsh: fix doc typos (Eric Blake)
- maint: typo fixes (Eric Blake)
- fix some typos about 'informations' (Chen Hanxiao)
- fix a typo in formatdomain (Chen Hanxiao)
- Expand description of host-model CPU mode (Jiri Denemark)
- virsh: fix a typo in virsh-domain (Chen Hanxiao)
- storage: document existing pools (Eric Blake)
- remote-driver: Fix 'leav' typo in comment (Christophe Fergeau)
- change the minimum weight description for blkio (Chen Hanxiao)
- Add some notes about secure usage of libvirt (Daniel P. Berrange)
- lxc: Fix an improper comment in lxc_process.c (Chen Hanxiao)
- nwfilter: fix a typo in nwfilter_gentech_driver.c (Hongwei Bi)
- cgroup: fix a comment typo in vircgroup.c (Chen Hanxiao)
- fix typo in HACKING (Chen Hanxiao)
- aclpolkit: Fix a heading typo (Cole Robinson)
Portability:
- virnetsocket: fix getsockopt on FreeBSD (Ryota Ozaki)
- MacOS: Handle changes to xdrproc_t definition (Doug Goldstein)
- fix api changes in xen restore (Bamvor Jian Zhang)
- MacOS: Re-add support for QEMU backend (Doug Goldstein)
- rpc: Retrieve peer PID via new getsockopt() for Mac (Doug Goldstein)
- build: fix build of virt-login-shell on systems with older gnutls (Jim Fehlig)
- build: fix linking virt-login-shell (Jim Fehlig)
- nodeinfo: fix physical memory size on Mac OS X (Ryota Ozaki)
- Add stub getegid impl for platforms lacking it (Daniel P. Berrange)
- better error checking for LOCAL_PEERCRED (Brian Candler)
- Add support for detecting PPC little endian arches (Daniel P. Berrange)
- xenapi: Fix build after const correctnes changes (Peter Krempa)
- rpc: Fix getsockopt on Snow Leopard and lower (Doug Goldstein)
- build: fix linker error on FreeBSD (Giuseppe Scrivano)
- tests: avoid compile failure on linux kernels older than 2.6.19 (Giuseppe Scrivano)
- nodeinfo: make freebsdNodeGetCPUCount work on Mac OS X (Ryota Ozaki)
- rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X (Ryota Ozaki)
- build: fix build on 32-bit platforms (Eric Blake)
- build: fix build on RHEL 5 (Eric Blake)
- build: fix build --without-remote (Eric Blake)
Bug fixes:
- Fix race in starting transient VMs (Daniel P. Berrange)
- Use a port from the migration range for NBD as well (Ján Tomko)
- nodedev_hal: fix segfault when virDBusGetSystemBus fails (Ryota Ozaki)
- Fix race condition reconnecting to vms & loading configs (Daniel P. Berrange)
- Don't update dom->persistent without lock held (Daniel P. Berrange)
- storage: fix incorrect typedef (Eric Blake)
- apparmor: Fix typo in function name in driver struct initialization (Peter Krempa)
- qemu: fix well-formed migration URI formatting (Michael Chapman)
- LXC: don't free tty before using it in lxcContainerSetupDevices (Gao feng)
- python: Fix Create*WithFiles filefd passing (Marian Neagul)
- networkStartDhcpDaemon: Check for dnsmasqCapsRefresh failure (Hongwei Bi)
- virsh: Fix job watching when STDIN is not a tty (Peter Krempa)
- qemu: fix removal of <interface type='hostdev'> (Laine Stump)
- Fix a problem introduced by commit 99889012 (Geoff Hickey)
- qemu: Avoid assigning unavailable migration ports (Wang Yufei)
- viralloc.h: Fix typo in VIR_APPEND_ELEMENT_COPY_QUIT (Michal Privoznik)
- remote: fix regression in event deregistration (Zhou Yimin)
- daemon: don't free domain if it's null (Chen Hanxiao)
- Remove ATTRIBUTE_NONNULL(3) from qemuMonitorJSONDrivePivot (John Ferlan)
- rpc: Correct the wrong payload size checking (Osier Yang)
- Fix typo breaking cgroups for NBD backed filesystems (Daniel P. Berrange)
- Ignore thin pool LVM devices. (Dusty Mabe)
- domain_conf.c: Initialize arrVar and cntVar (Michal Privoznik)
- vbox: handle 'saved' state of VMs (Ryota Ozaki)
- esx: Fix floppy.fileName handling in the vmx file parser (Geoff Hickey)
- Convert uuid to a string before printing it (Ján Tomko)
- Initialize threading & error layer in LXC controller (Daniel P. Berrange)
- Don't ignore all dbus connection errors (Daniel P. Berrange)
- Fix exit status of lxc controller (Daniel P. Berrange)
- Fix flaw in detecting log format (Daniel P. Berrange)
- qemu_migration: Avoid crashing if domain dies too quickly (Michal Privoznik)
- util: fix two virCompareLimitUlong bugs (Bing Bu Cao)
- storage_backend: Fix issue with allocation of 0 length volume (John Ferlan)
- qemu: Init @pcidevs in qemuPrepareHostdevPCIDevices (Michal Privoznik)
- LXC: Fix handling of RAM filesystem size units (Ján Tomko)
- Don't clobber 'ret' variable in testCompareXMLToXMLHelper (Daniel P. Berrange)
- Adjust legacy max payload size to account for header information (Claudio Bley)
- storage: fix file allocation behavior in file cloning (Oskari Saarenmaa)
- virfile: safezero: fix buffer allocation max size (Oskari Saarenmaa)
- test: Fix coverity warnings (Cole Robinson)
- nodedev: Resolve Relax-NG validity error (John Ferlan)
- Free cmd in virNetDevVethCreate (Gao feng)
- Free cmd in virNetDevVethDelete (Gao feng)
- qemu: check actual netdev type rather than config netdev type during init (Laine Stump)
- qemuMonitorTestFree: Join worker thread (Michal Privoznik)
- Avoid deleting NULL veth device name (Daniel P. Berrange)
- qemuMonitorJSONSendKey: Avoid double free (Michal Privoznik)
- qemuMonitorJSONGetVirtType: Fix error message (Michal Privoznik)
- qemu: cgroup: Fix crash if starting nographics guest (Cole Robinson)
- selinux: Only close the selabel_handle once (Ján Tomko)
- Fix handling of IPv6 listen addresses in cmdDomDisplay (Ján Tomko)
- util: recognize SMB/CIFS filesystems as shared (Laine Stump)
- Fix leak of objects when reconnecting to QEMU instances (Daniel P. Berrange)
Improvements:
- libxl: fix dubious cpumask handling in libxlDomainSetVcpuAffinities (Jeremy Fitzhardinge)
- Improve debugging of QEMU start/stop (Daniel P. Berrange)
- Improve debugging of job enter/exit code (Daniel P. Berrange)
- storage: use correct type for array count (Eric Blake)
- maint: avoid further typedef accidents (Eric Blake)
- libvirt.c: indent code of virDomainGetMemoryParameters's documentation (Claudio Bley)
- libvirt.c: add 2 spaces of indentation to example code of virStreamSend (Claudio Bley)
- Add '+' to uid/gid printing for label processing (John Ferlan)
- Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs (Daniel P. Berrange)
- capabilities: add baselabel per sec driver/virt type to secmodel (Giuseppe Scrivano)
- security: add new internal function "virSecurityManagerGetBaseLabel" (Giuseppe Scrivano)
- security: use a single function to set DAC user and group (Giuseppe Scrivano)
- virsh: new environment variable VIRSH_HISTSIZE (Pavel Raiskup)
- maint: update to latest gnulib (Eric Blake)
- Skip debug message in lxcContainerSetID if no map is set. (Chen Hanxiao)
- Avoid Coverity DEADCODE warning (John Ferlan)
- virsh: allow alias to expand to opt=value pair (Eric Blake)
- Ignore GNU Global tag files (Martin Kletzander)
- build: Fix prohibit_int_ijk (and iijjkk) on RHEL 5 (Martin Kletzander)
- Get rid of shadowed booleans (Michal Privoznik)
- vircgroupmock: Mock access() to some more files (Michal Privoznik)
- tests: Use lv_abs_top_builddir instead of bare abs_top_builddir (Michal Privoznik)
- qemu: move qemuDomainRemoveNetDevice to avoid forward reference (Laine Stump)
- qemu: simplify calling qemuDomainHostdevNetConfigRestore (Laine Stump)
- Move virt-login-shell into libvirt-login-shell sub-RPM (Daniel P. Berrange)
- Block all use of libvirt.so in setuid programs (Daniel P. Berrange)
- Remove (nearly) all use of getuid()/getgid() (Daniel P. Berrange)
- Don't allow remote driver daemon autostart when running setuid (Daniel P. Berrange)
- Only allow the UNIX transport in remote driver when setuid (Daniel P. Berrange)
- Block all use of getenv with syntax-check (Daniel P. Berrange)
- Remove all direct use of getenv (Daniel P. Berrange)
- Make virCommand env handling robust in setuid env (Daniel P. Berrange)
- Set a sane $PATH for virt-login-shell (Daniel P. Berrange)
- Add helpers for getting env vars in a setuid environment (Daniel P. Berrange)
- qemu: Fix augeas support for migration ports (Michal Privoznik)
- qemu: Make migration port range configurable (Jiri Denemark)
- netcf: Don't complain when cleanup is called before init (Christophe Fergeau)
- virsh: improve usability of '--print-xml' flag for attach-disk command (Chen Hanxiao)
- esx: Remove unnecessary NULL comparisons (3/3) (Geoff Hickey)
- esx: Remove unnecessary NULL comparisons (2/3) (Geoff Hickey)
- esx: Remove unnecessary NULL comparisons (1/3) (Geoff Hickey)
- Add support for enabling SASL for SPICE guests (Daniel P. Berrange)
- qemuDomainCleanupRemove: s/memmove/VIR_DELETE_ELEMENT_INPLACE/ (Michal Privoznik)
- build: use the gnulib version of the .m4 files when present (Giuseppe Scrivano)
- storage: allow interleave in pool XML (Eric Blake)
- Add some logging to LXC disk/fs nbd/loop setup (Daniel P. Berrange)
- Add logging to LXC cgroup devices setup (Daniel P. Berrange)
- Add log statement when NBD device is setup (Daniel P. Berrange)
- AArch64: Add qemu capabilities schemeta for test. (Pranavkumar Sawargaonkar)
- Implement minimal sysinfo for AArch64 platforms. (Pranavkumar Sawargaonkar)
- AArch64: Parse cputopology from /proc/cpuinfo. (Pranavkumar Sawargaonkar)
- AArch64: CPU Support for AArch64 (ARMv8 64bit). (Pranavkumar Sawargaonkar)
- AArch64: Add AArch64 architecture to list of valid arches. (Pranavkumar Sawargaonkar)
- cpu: x86: Clean up error messages in x86VendorLoad() (Peter Krempa)
- cpu: x86: Use whitespace to clarify context and use consistent labels (Peter Krempa)
- cpu: x86: Fix function header formatting and whitespace (Peter Krempa)
- cpu: x86: Fix return types of x86cpuidMatch and x86cpuidMatchMasked (Peter Krempa)
- cpu: x86: Rename data_iterator and DATA_ITERATOR_INIT (Peter Krempa)
- cpu: x86: Rename x86DataAddCpuid as virCPUx86DataAddCPUID (Jiri Denemark)
- cpu: x86: Rename x86MakeCPUData as virCPUx86MakeData (Jiri Denemark)
- cpu: x86: Rename x86DataFree() as virCPUx86DataFree() (Jiri Denemark)
- cpu: x86: Rename struct cpuX86Data as virCPUx86Data (Jiri Denemark)
- cpu: x86: Rename struct cpuX86cpuid as virCPUx86CPUID (Jiri Denemark)
- cpu: Add support for loading and storing CPU data (Jiri Denemark)
- qemu: command: Fix macro indentation (Peter Krempa)
- conf: Mark user provided strings in error messages when parsing XML (Peter Krempa)
- schema: Rename option 'hypervtristate' to 'featurestate' (Peter Krempa)
- fix typo in lxc_driver.c and virsh-nodedev.c (Hongwei Bi)
- build: Add lxc testcase to dist list (Daniel Hansel)
- cgroup: leave blkio cgroup value checking to kernel (Chen Hanxiao)
- cgroup: show error when EINVAL is returned (Chen Hanxiao)
- vbox: merge duplicate state conversions (Ryota Ozaki)
- build: syntax check to avoid 'const fooPtr' (Eric Blake)
- maint: avoid 'const fooPtr' in all remaining places (Eric Blake)
- maint: avoid 'const fooPtr' in qemu (Eric Blake)
- maint: avoid 'const fooPtr' in security (Eric Blake)
- maint: avoid 'const fooPtr' in conf (Eric Blake)
- maint: avoid 'const fooPtr' in domain_conf (Eric Blake)
- maint: fix awkward typing of virDomainChrGetDomainPtrs (Eric Blake)
- maint: avoid 'const fooPtr' in python bindings (Eric Blake)
- maint: avoid 'const fooPtr' in tests (Eric Blake)
- maint: avoid 'const fooPtr' in nwfilter files (Eric Blake)
- maint: avoid 'const fooPtr' in cpu files (Eric Blake)
- maint: avoid 'const fooPtr' in virnet files (Eric Blake)
- maint: avoid 'const fooPtr' in several util files (Eric Blake)
- maint: avoid 'const fooPtr' in hashes (Eric Blake)
- maint: avoid 'const fooPtr' in public API (Eric Blake)
- Improve log filtering in virLXCProcessReadLogOutputData (Daniel P. Berrange)
- Ensure lxcContainerResolveSymlinks reports errors (Daniel P. Berrange)
- Ensure lxcContainerMain reports errors on stderr (Daniel P. Berrange)
- VMX: Serial devices don't have to be attached (Doug Goldstein)
- Revert "VMX: Some serial ports are not actually connected" (Doug Goldstein)
- qemu: snapshot: Add support for compressing external snapshot memory (Peter Krempa)
- qemu: managedsave: Add support for compressing managed save images (Peter Krempa)
- Improve error reporting with LXC controller (Daniel P. Berrange)
- Make LXC controller use a private dbus connection & close it (Daniel P. Berrange)
- Add a method for closing the dbus system bus connection (Daniel P. Berrange)
- Allow use of a private dbus bus connection (Daniel P. Berrange)
- VMware: Do version detection earlier (Doug Goldstein)
- VMware: Simplify array walk for driver type (Doug Goldstein)
- qemu: Include listenAddress in debug prints (Michal Privoznik)
- Move virNetDevVPort enum impl into virnetdevvportprofile.c (Daniel P. Berrange)
- qemu_conf: Introduce "migration_address" (Michal Privoznik)
- qemu: Implement support for VIR_MIGRATE_PARAM_LISTEN_ADDRESS (Michal Privoznik)
- virsocket: Introduce virSocketAddrIsWildcard (Michal Privoznik)
- Migration: Introduce VIR_MIGRATE_PARAM_LISTEN_ADDRESS (Michal Privoznik)
- qemu: Introduce qemuDomainDefCheckABIStability (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONSendKey (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetVirtType (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetCPUInfo (Michal Privoznik)
- qemumonitorjsontest: Extend the test for yet another monitor commands (Michal Privoznik)
- qemu: Prefer VFIO for PCI device passthrough (Peter Krempa)
- qemu: hostdev: Add checks if PCI passthrough is available in the host (Peter Krempa)
- qemu: hostdev: Fix function spacing and header formatting (Peter Krempa)
- qemu: refactor qemuCompressProgramAvailable() (Peter Krempa)
- qemu: Fix coding style in qemuDomainSaveFlags() (Peter Krempa)
- storage: Use bool instead of int (Ján Tomko)
- tests: Add qemu test for multiple timers (Cole Robinson)
- qemu: hostdev: Refactor PCI passhrough handling (Peter Krempa)
- virerror: s/VIR_ERR_STORAGE_VOL_EXISTS/VIR_ERR_STORAGE_VOL_EXISTS/ (Michal Privoznik)
- fix a ambiguous output of the command:'virsh vol-create-as' (Hongwei Bi)
- build: add configure --without-readline (Eric Blake)
- build: move readline check into its own macro (Eric Blake)
- build: kill maintainer mode, always rebuild by default (Eric Blake)
- Remove use of virConnectPtr from all remaining nwfilter code (Daniel P. Berrange)
- Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' (Daniel P. Berrange)
- Remove virConnectPtr arg from virNWFilterDefParse* (Daniel P. Berrange)
- qemu: Use maximum guest memory size when getting NUMA placement advice (Peter Krempa)
- virfile: safezero: fall back to writing block by block if mmap fails (Oskari Saarenmaa)
- test: snapshot: Add REDEFINE support (Cole Robinson)
- qemu: snapshot: Break out redefine preparation to shared function (Cole Robinson)
- test: Implement snapshot create/delete/revert APIs (Cole Robinson)
- test: Allow specifying domainsnapshot XML (Cole Robinson)
- qemu: snapshots: Simplify REDEFINE flag check (Cole Robinson)
- qemucapabilitiesdata: Add qemu-1.6.50 data (Michal Privoznik)
- qemucapabilitiesdata: Add qemu-1.6.0 data (Michal Privoznik)
- qemucapabilitiesdata: Add qemu-1.4.2 data (Michal Privoznik)
- qemucapabilitiesdata: Add qemu-1.3.1 data (Michal Privoznik)
- qemucapabilitiesdata: Add qemu-1.2.2 data (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONSystemPowerdown (Michal Privoznik)
- Use 'vnet' as prefix for veth devices (Daniel P. Berrange)
- Retry veth device creation on failure (Daniel P. Berrange)
- Avoid reporting an error if veth device is already deleted (Daniel P. Berrange)
- Don't set netdev offline in container cleanup (Daniel P. Berrange)
- qemumonitorjsontest: Test qemuMonitorJSONGetMigrationCapability (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetTargetArch (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONSetBlockIoThrottle (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetPtyPaths (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetSpiceMigrationStatus (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetMigrationStatus (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetMigrationCacheSize (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetBlockStatsInfo (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetBlockInfo (Michal Privoznik)
- qemumonitorjsontest: Test qemuMonitorJSONGetBalloonInfo (Michal Privoznik)
- qemu_hotplug: Allow QoS update in qemuDomainChangeNet (Michal Privoznik)
- virNetDevBandwidthEqual: Make it more robust (Michal Privoznik)
- test: Implement readonly snapshot APIs (Cole Robinson)
- test: Wire up managed save APIs (Cole Robinson)
- test: Allow specifying object transient state in driver XML (Cole Robinson)
- tests: Introduce qemucapabilitiestest (Michal Privoznik)
- qemuMonitorTest: Make check for monitor command match optional (Michal Privoznik)
- tests: Learn qemuMonitorTestNew optional greeting (Michal Privoznik)
- qemu_capabilities: Introduce virQEMUCapsInitQMPMonitor (Michal Privoznik)
Cleanups:
- xenapi: fix coding style in xenapi_driver.c (Hongwei Bi)
- virsh: undocument --shareable (--mode already covers it) (Eric Blake)
- Remove test case average timing (Daniel P. Berrange)
- Remove existing OOM test impl (Daniel P. Berrange)
Thanks everybody for everyone who helped for this release, be it for
documentation, bug reports, patches, etc ...
Enjoy !
Daniel
--
Daniel Veillard | Open Source and Standards, Red Hat
veillard@xxxxxxxxxx | libxml Gnome XML XSLT toolkit http://xmlsoft.org/
http://veillard.com/ | virtualization library http://libvirt.org/
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list