[ol8_kvm_appstream] libvirt-daemon-config-nwfilter-5.7.0-32.module+el8.5.0+20482+a450964e.x86_64

Network filter configuration files for cleaning guest traffic

Changelog (Show File list) (Show related packages)

• Fri Jan 28 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-32.el8

  - qemu: Validate config->exadata before reaping guests (Wim ten Have) [Orabug: 33763967]
  - qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have) [Orabug: 33268059]
  - qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have) [Orabug: 33268059]
  - qemu: Label restore path outside of secdriver transactions (Michal Privoznik) [Orabug: 33351242]
  - security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Privoznik) [Orabug: 33351242]

• Fri Oct 08 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-31.el8

  - qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

• Fri Oct 01 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-30.el8

  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
  - qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
  - qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

• Mon Sep 06 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-29.el8

  - qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: Tell secdrivers which images are top parent (Michal Prívozník) [Orabug: 33086913]
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Prívozník) [Orabug: 33086913]

• Wed Jun 30 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-28.el8

  - qemu_capabilities: Rework domain caps cache (Michal Prívozník) [Orabug: 32664432]
  - tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]
  - qemu: cache host arch separately from virCapsPtr (Daniel P. Berrangé) [Orabug: 32664432]
  - cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Prívozník) [Orabug: 32664432]
  - virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa) [Orabug: 32164351]
  - tests: qemu: Add test data for the new <slice> element (Peter Krempa) [Orabug: 32164351]
  - qemu: Add support for slices of type 'storage' (Peter Krempa) [Orabug: 32164351]
  - tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Properly format storage slice into backing store strings (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Store nodenames of slice in status XML (Peter Krempa) [Orabug: 32164351]
  - conf: Implement support for <slices> of disk source (Peter Krempa) [Orabug: 32164351]
  - docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa) [Orabug: 32164351]
  - qemu: block: forbid creation of storage sources with <slice> (Peter Krempa) [Orabug: 32164351]
  - qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa) [Orabug: 32164351]
  - qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa) [Orabug: 32164351]
  - util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa) [Orabug: 32164351]
  - tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa) [Orabug: 32164351]
  - docs: formatdomain: Close <source> on one of disk examples (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Refactor formatting of node names into status XML (Peter Krempa) [Orabug: 32164351]
  - tests: virstorage: Add test cases for "json:" pseudo-URI without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa) [Orabug: 32164351]
  - virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa) [Orabug: 32164351]
  - qemu: enable blockdev support (Peter Krempa) [Orabug: 32164351]
  - qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Build the 'pflash' drives via -machine (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Introduce helper to convert <loader> into virStorageSource (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Extract formatting of -drive for pflash (Peter Krempa) [Orabug: 32164351]
  - qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: qapi: Add support for command features (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa) [Orabug: 32164351]
  - docs: Document support for obeying <backingStore> of <disk> on input (Peter Krempa) [Orabug: 32164351]
  - conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa) [Orabug: 32164351]
  - qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa) [Orabug: 32164351]
  - domaincaps: Store domain capability features in an array (Peter Krempa) [Orabug: 32164351]
  - qemu: domcaps: Initialize all features (Peter Krempa) [Orabug: 32164351]
  - domcaps: Add function for initializing domain caps as unsupported (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Extract formatting of the <features> subelement (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa) [Orabug: 32164351]
  - conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa) [Orabug: 32164351]
  - conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa) [Orabug: 32164351]
  - conf: turn virDomainMemtuneFormat void (Peter Krempa) [Orabug: 32164351]
  - conf: domain: Split up formatting of <memtune> and <memoryBacking> (Peter Krempa) [Orabug: 32164351]
  - conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa) [Orabug: 32164351]
  - conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
  - conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
  - qemu: caps: Make capability filler functions void (Peter Krempa) [Orabug: 32164351]
  - util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa) [Orabug: 32164351]
  - qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Use XML based disk bus convertor in error message (Peter Krempa) [Orabug: 32164351]
  - storagefile: Fill in meta->externalDataStore (Cole Robinson) [Orabug: 32164351]
  - storagefile: Add externalDataStore member (Cole Robinson) [Orabug: 32164351]
  - storagefile: Split out virStorageSourceNewFromChild (Cole Robinson) [Orabug: 32164351]
  - storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson) [Orabug: 32164351]
  - storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson) [Orabug: 32164351]
  - storagefile: Add externalDataStoreRaw member (Cole Robinson) [Orabug: 32164351]
  - storagefile: Fix backing format \0 check (Cole Robinson) [Orabug: 32164351]
  - storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson) [Orabug: 32164351]
  - storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
  - storagefile: Use qcowXGetBackingStore directly (Cole Robinson) [Orabug: 32164351]
  - storagefile: Drop now unused isQCow2 argument (Cole Robinson) [Orabug: 32164351]
  - storagefile: Check version to determine if qcow2 or not (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Fix check for empty backing file (Cole Robinson) [Orabug: 32164351]
  - storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson) [Orabug: 32164351]
  - qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Replace snapshot transaction action generator (Peter Krempa) [Orabug: 32164351]
  - tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin) [Orabug: 32164351]
  - qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa) [Orabug: 32164351]
  - conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa) [Orabug: 32164351]
  - conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa) [Orabug: 32164351]
  - tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa) [Orabug: 32164351]
  - tests: add qemu capabilities data for qemu 4.2 (Peter Krempa) [Orabug: 32164351]
  - lxc: fix compile error (Joe Jin) [Orabug: 32164351]
  - qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa) [Orabug: 32164351]
  - qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa) [Orabug: 32164351]
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Prívozník) [Orabug: 32164351]
  - qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa) [Orabug: 32164351]
  - qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong) [Orabug: 32164351]
  - qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong) [Orabug: 32164351]
  - qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Prívozník) [Orabug: 32164351]
  - Revert "qemu: add socket datagram capability" (Michal Prívozník) [Orabug: 32164351]
  - tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa) [Orabug: 32164351]
  - snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia) [Orabug: 32164351]
  - qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia) [Orabug: 32164351]
  - qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark) [Orabug: 32164351]
  - qemu: Fix regression in snapshot-revert (Eric Blake) [Orabug: 32164351]
  - lib: Define and use autofree for virConfPtr (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Use more of VIR_AUTOUNREF() (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Use more of VIR_AUTOFREE() (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Prívozník) [Orabug: 32164351]
  - virhostdev: Don't unref @pcidevs twice (Michal Prívozník) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza) [Orabug: 32164351]
  - remote: fix UNIX socket path being incorrectly built for libvirtd (eater) [Orabug: 32164351]
  - lib: Grab write lock when modifying list of domains (Michal Prívozník) [Orabug: 32164351]
  - qemu: reset VM id after external devices stop (Marc-André Lureau) [Orabug: 32164351]
  - qemu: add dbus-vmstate capability (Marc-André Lureau) [Orabug: 32164351]
  - qemu: add socket datagram capability (Marc-André Lureau) [Orabug: 32164351]
  - tests: fix xml2xml tpm-emulator.xml test (Marc-André Lureau) [Orabug: 32164351]
  - qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa) [Orabug: 32164351]
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa) [Orabug: 32164351]
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa) [Orabug: 32164351]
  - qemu: Add -blockdev support for external snapshots (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa) [Orabug: 32164351]
  - qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa) [Orabug: 32164351]
  - qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Save status and config XMLs only on success (Peter Krempa) [Orabug: 32164351]
  - qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa) [Orabug: 32164351]
  - qemu: driver: Fix shallow non-reuse block copy (Peter Krempa) [Orabug: 32164351]
  - qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa) [Orabug: 32164351]
  - qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa) [Orabug: 32164351]
  - qemu: Prevent storage causing too much nested XML (Peter Krempa) [Orabug: 32164351]
  - qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa) [Orabug: 32164351]
  - qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa) [Orabug: 32164351]
  - qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark) [Orabug: 32164351]
  - qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa) [Orabug: 32164351]
  - tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa) [Orabug: 32164351]
  - qemu: block: Use correct type when creating image size JSON entries (Peter Krempa) [Orabug: 32164351]
  - Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have) [Orabug: 32708041]
  - virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)
  - virt-admin: Introduce command srv-update-tls (Zhang Bo) [Orabug: 32768102]
  - admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]
  - tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo) [Orabug: 32768102]
  - virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]

• Thu Mar 11 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-27.el8

  - Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten Have) [Orabug: 32561685]

• Tue Feb 23 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-26.el8

  - exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have) [Orabug: 32537538]
  - exadata: Fix CPU Packing when out of pCPUs (Wim ten Have) [Orabug: 32527311]

• Wed Feb 17 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-25.el8

  - exadata: force a host CPUs reserved pCPU threshold (Wim ten Have) [Orabug: 32516090]

• Wed Feb 10 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-24.el8

  - exadata: Add configurable libvirtd mlockall support (Wim ten Have) [Orabug: 32479237]
  - exadata: hint a configurable number of memory init threads to qemu (Wim ten Have) [Orabug: 32460334]
  - Exadata: domain group should allow for asymmetric creation (Wim ten Have) [Orabug: 32060622]

• Wed Jan 20 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-23.el8

  - util: remove unneeded cleanup labels (Wim ten Have) [Orabug: 32399255]
  - virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (Wim ten Have) [Orabug: 32379098]