linux/meta-virtualization.git/recipes-extended/libvirt, branch wrynose

libvirt: fix python3 compatibility in hook_support.py

2026-05-11T20:15:08+00:00

By default Popen expects all the streams to be bytes-like objects but, in the Popen.communicate() function call, the "input" argument is a string, making the call fail with the error: qemu hook error: a bytes-like object is required, not 'str' Fix the error by setting text mode to True in the subprocess creation. Also fix the "SyntaxWarning: invalid escape sequence '\w'" in the regex used to match script names. Signed-off-by: Massimiliano Minella Signed-off-by: Bruce Ashfield

libvirt: remove obsolete depends to avahi

2026-04-28T11:44:13+00:00

libvirt has removed support for avahi in version 5.5.0 in 2019: * Remove Avahi mDNS support This feature was never used outside of virt-manager, which has itself stopped using it a while ago. Signed-off-by: Louis Rannou Signed-off-by: Louis Rannou Signed-off-by: Bruce Ashfield

libvirt: Drop the deprecated workaround

2026-04-21T13:11:11+00:00

The workaround is not needed anymore as the systemd supporting. The libvirtd.service Type has been changed from notify to notify-reload, so the final Type will be 'forking-reload', that's invalid for systemd. Here we delete it to avoid the following output information: >/lib/systemd/system/libvirtd.service:29: Failed to parse Type=forking-reload, ignoring: Invalid argument Signed-off-by: Zhixiong Chi Signed-off-by: Bruce Ashfield

libvirt-dbus: update to v1.4.1-tip

2026-04-21T02:25:55+00:00

We drop the inline error supression, since upstream has it in commit c0fffce New upstream version installs /usr/lib/sysusers.d/libvirt-dbus.conf for systemd-sysusers user/group creation. Add the directory to FILES to fix installed-vs-shipped QA error. Bumping libvirt-dbus to version v1.4.1-46-gd1c49c2, which comprises the following commits: d1c49c2 domain: Fix incorrect free of GString variable c0fffce build: Do not use -Winline f1d2f64 ci: refresh with latest 'lcitool manifest' 2105c17 Introduce sysusers config file to create libvirtdbus user 0643cd8 ci: refresh with latest 'lcitool manifest' ded4bc8 ci: refresh with latest 'lcitool manifest' 8f06b76 ci: switch to remote git refs for dependent projects 2fa70fd ci: refresh with lcitool manifest ea96102 spec: use systemd macros to handle services d0a5650 spec: use systemd macro to specify path of user unit directory c281c50 ci: lcitool: Maintain project package deps lists here 193248a rpm: convert license to SPDX format c8bb8ac meson: bump required libvirt version to 3.1.0 08f7541 events: Remove extra white spaces at the end of line d37813b Remove GetBlockInfo method from Domain Interface 4a971c4 ci: add Fedora 37 target 58a9f53 ci: upgrade opensuse leap from 153 to 154 24e43b4 ci: refresh with latest lcitool manifest 697ef0b ci: drop unsupported targets ef9430e HACKING: Use gitlab as main repository 4fbd82e ci: refresh with latest lcitool manifest 8333b9f spec: add systemd-rpm-macros as build dependency 35173fa ci: add Fedora 36 3b070a5 ci: refresh generated files 111fe77 ci: drop unsupported Fedora 34 95ac644 README: update libvirt dbus bindings link 23267d4 ci: Add more target platforms d62b5b1 ci: Build RPMs on CentOS Stream 8 5232cb9 ci: Refresh generated files 6eb24e9 ci: Drop unsupported targets d130ab0 ci: Move Coverity job from CentOS 8 to AlmaLinux 8 2757a47 ci: Add AlmaLinux 8 053d238 ci: Drop Travis CI support 3077aa8 Add .gitattributes file 502c8b5 rpm: Drop conditional needed on RHEL 7 b685a89 Fix meson run_command with check param 87b16e9 Implement GetBlockInfo, SetBlockThreshold methods and BlockThreshold signal for Domain Interface 3d64429 Switch to new GitHub repo-lockdown configuration f4d3863 ci: remove obsolete refresh script and documentation 2b0a513 ci: re-generate containers/gitlab config from manifest fa892e3 ci: define a CI manifest file b1bd1d2 gitlab: skip tests on ubuntu 18.04 c7df361 gitlab: remove centos-7 build target 204d341 meson: Fix systemd services install when --prefix was specified 6ef9bb9 ci: refresh centos-stream container ce6cf93 gitlab: use custom docker:dind image 0c355bb Release of libvirt-dbus 1.4.1 Signed-off-by: Bruce Ashfield

libvirt-dbus: disable -Werror=inline to fix build error

2026-04-13T13:50:39+00:00

The meson.build from libvirt-dbus enables the flag -Winline. Combined with -Werror from Yocto, this causes a build failure because GCC refuses to inline g_autoptr_cleanup_generic_gfree() from the glib header glib-autocleanups.h, as it considers the call unlikely and estimates code size would grow. Because the function g_autoptr_cleanup_generic_gfree is defined as static inline with good reason, this patch disables -Werror=inline for libvirt-dbus to allow the build to succeed. Signed-off-by: Tanguy Raufflet Signed-off-by: Bruce Ashfield

libvirt: disable netcf backend by default

2026-03-30T19:37:58+00:00

I see a failure in netcf: | ./bootstrap: .gnulib/gnulib-tool --import --no-changelog --aux-dir build-aux --doc-base doc --lib libgnu --m4-base gnulib/m4/ --source-base gnulib/lib/ --tests-base gnulib/tests --local-dir gl --lgpl=2 --with-tests --makefile-name=gnulib.mk --libtool --import ... | python3: can't open file '/home/flk/bitbake-builds/poky/build/tmp/work/corei7-64-oe-linux/netcf/0.2.8+git/sources/netcf-0.2.8+git/.gnulib/.gnulib-tool.py': [Errno 2] No such file or directory | ./bootstrap: gnulib-tool failed Since the code hasn't been updated in over seven years, and after reading this discussion, perhaps the best solution would be to disable netcf support by default? https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/message/755CCFUFUW6OTN7CAHB77H7YXQNE5WGG/ Signed-off-by: Markus Volk Signed-off-by: Bruce Ashfield

ceph, libvirt, openvswitch: marked some CVEs as patched

2026-03-30T19:35:54+00:00

For ceph, libvirt and openvswitch, 9 CVEs were marked as "unpatched" whereas they have been patched long ago compared to the versions of the recipes, because the NVD database does not contain patched version for those CVEs. Reviewed-by: Enguerrand de Ribaucourt Reviewed-by: Erwann Roussy Signed-off-by: Youenn Le Jeune Signed-off-by: Bruce Ashfield

libvirt: update to v12.1.0 -tip

2026-03-24T18:56:34+00:00

We update our python checksum and drop a patch that is no longer needed. Bumping libvirt to version v12.1.0-107-g9fa6beff05, which comprises the following commits: 9fa6beff05 qemuxmlconftest: Update 's390x' tests using 'virt-4.2' machine type 4537c0b870 qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM 59fde80f39 qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM 623844bf2a virsh: migrate: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO f5fc45efea qemu: migration: Introduce 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO' 6670924a0d virsh: Add support for 'VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED' as '--dest-is-zero' aa7d3142aa qemu: Add VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED flag for virDomainBlockCopy b7e51e875a qemu: monitor: Add support for 'target-is-zero' option of 'blockdev-mirror' aba64fc539 qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_MIRROR_TARGET_IS_ZERO f7ae47274a qemuMigrationSrcPerformTunnel: Remove 'migrate_disks' argument 7abfcef53c qemuTranslateSnapshotDiskSourcePool: Use proper error code d9e2db9445 qemu: conf: Don't use VIR_ERR_INTERNAL_ERROR for config file parsing errors 42ef9a200a qemu: backup: Move setup of VIR_STORAGE_NET_HOST_TRANS_FD to qemuBackupPrepare 231ae15e97 qemuxmlconftest: Add missing test for attribute of p9-fs devices 20ecc25b91 qemuBuildFSStr: Properly format 'readonly' attribute 2b03d26471 qemuBuildFSStr: Drop code for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE b05fc0eabf qemu: capabilities: Don't advertise support for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE df3f46c28c qemu: validate: Reject configs with VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE 954036635a scripts: dtrace2systemtap: Fix argument name extraction regex to avoid '*' in names 95d29b66b4 hyperv: Remove unnecessary hash table size query. 85fdb72ac0 hyperv: use constants for xml namespaces a561883abf qemu: add automatic port allocation for pull-mode backup NBD servers 36cf50f85b qemu: driver: Setup 'virPortAllocator' for backup NBD server ports d1c6f0edc1 qemu: conf: add setup for automatic port allocation for pull-mode backup NBD servers 406b7fb0bd tests: Add iommufd fdgroup test 0a83b28795 qemu: Implement iommufd fdgroup 58875a6df6 conf: Add iommufd fdgroup support fc516031ed qemu: Implement iommufd c03b8f0804 conf: Introduce domain iommufd element c1d38e9428 src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD d1fb5cf127 qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD c89b2bf1a8 qemu: Expand call to qemuDomainNeedsVFIO ffa8020d36 hypervisor: Fix virHostdevNeedsVFIO detection d0afa0a842 conf: Refactor virHostdevIsPCIDevice f89e3dbce8 conf: Move and rename virStorageSourceFDTuple object 1a528a4d29 network: Don't enable ip_forward for VIR_NETWORK_FORWARD_OPEN 70b3053057 qemuhotplug: Introduce interface-network-hostdev 685f359eaf qemuhotplugtest: Use fake drivers 605112c584 virnetworkportxml2xmldata: Use different PCI address in plug-hostdev-pci.xml b01baffbb2 qemuxmlconftest: Separate fake drivers into a separate file 6d6da1cbac tests: Drop WITH_QEMU from qemu specific tests binaries/libraries cd6a1ba222 networkxmlconftest: s/fail/cleanup/ d9b34ad12b network: Format element using virXMLFormatElement() 05cdfcf568 src: Drop NULL check before calling virBufferEscapeString() 54f5032e57 hyperv: Implement virDomainSnapshotGetParent() 1a5f2ad4c8 hyperv: Implement virDomainSnapshotCurrent()/virDomainHasCurrentSnapshot() 09c0b24424 hyperv: implement virDomainSnapshotGetXMLDesc() 00ccf5b2a8 hyperv: implement virDomainListAllSnapshots()/virDomainSnapshotNum() 6abb988fd1 hyperv: Implement domainSnapshotLookupByName() 293bb59e75 viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged 1fd9f5a3db qemu: Enable AMD IOMMU XTSUP by default e1b8853e48 conf: support >255 vcpu w/ amd-iommu xtsup d47de9e8b9 conf: fix error log for passthrough and xtsup attributes 2842d89706 conf: fix virDomainIOMMUDefEquals for amd_iommu 2e25854933 util: implement virHostCPUGetOnlineBitmap() for FreeBSD 88b5e33b4e rpc: free saved close error in virNetClientDispose e25b82c5f8 tests: Create fake root dirs later 0b54c9d535 docs: Clarify host-model description in domain capabilities 57e5bb55ce virsh: Add --expand-cpu-features option for domcapabilities 3215fee349 qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES 8aa13d1b16 Introduce EXPAND_CPU_FEATURES flag for domain capabilities f552faab53 docs: storage: Note that refreshing the storage pool is needed on outside modification 1ee7d7147b util: Move 'virProcessLimitResourceToLabel' into same preprocessor if-block as only caller 97f3fcd294 qemu: monitor: Use 'flat' mode of 'query-block' 3ae6de95f2 qemu: capabilities: Introduce QEMU_CAPS_QUERY_BLOCK_FLAT e7d959a87f qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-2062-g084a6c6e73"aarch 75edc7ae98 qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-2062-g084a6c6e73" 837463f83f qemu: processShutdownCompletedEvent: Remove inactive VM object after shutdown 89d2948a16 qemu: hotplug: Don't access disk definititon after it was freed after media change bed561c07a qemuDomainAttachDeviceDiskLive: Remove 'disk' variable 25662b3700 qemu_hotplug: Fix crash when attaching network inteface with hostdev network 2f25afba55 util: extend virHostCPUGetInfo() for FreeBSD 4cb677df95 docs: bhyve: add arm64 guest example 9c304e5cc6 docs: bhyve: fix typo in version number d760c5c12e docs: bhyve: document NUMA domains configuration 3f3cb3ab51 hyperv: report whether guests have TPM enabled 83621dcb33 qemuhotplugtest: Run "interface-hostdev" test cases only on Linux f9bb819fc4 qemuhotplugtest: Introduce interface-hostdev test case 662b1f4eb3 virnetdevmock: Mock virNetDevSaveNetConfig() and virNetDevSetNetConfig() e9798b8397 virpcimock: Create net/ subdir for devices 542230251b virpcimock: Create sriov_totalvfs file and virtfnN symlinks d8c70c8988 tests: stop mocking virGetUserRuntimeDirectory() 79d97d2b4f tests: point $HOME and $XDG_* into usable fake root directory f83c0a5e6e consistently use glib g_getenv() instead of libc getenv() 52806b89d6 util: make completely separate functions for WIN32 versions of virGetUser*Directory() 5b1c8c8b86 util: rename virGetUserDirectory(ByUID) to virGetUserHomeDirectory(ByUID) 2dd4298339 remote: reduce scope of userdir in remoteGetUNIXSocketHelper() 86a68ee852 util: reduce scope of rundir in virPidFileConstructPath() 65cd851e57 util: reduce scope/autofree-ify rundir in virDaemonUnixSocketPaths() 331d9fe3ba qemu: support setting default route for passt interfaces inside the guest acd8e9595f conf/util: fix non-specification of IP route destination address 21c8588683 util: make the route arg to virNetDevIPRouteGetPrefix const 1468f995e7 qemu: only limit IPv4 prefix for slirp 4b5c555e97 qemu: reorganize qemuValidateDomainDeviceDefNetwork() 0ae2dde5a8 qemu: delete passt "repair" socket when appropriate 3ea1550c64 test: Default to ROM type for loader 82b09f105a bhyve: support NUMA configuration for domains e4b0fdb72f hyperv: implement virDomainDefineXMLFlags() e62e777d3f hyperv: fix flags passed to virDomainDefParseString() 7aed06b055 hyperv: ensure we don't define multiple domains with the same name bf27594575 hyperv: improve error message when redefining domain fa016baf0a util: json: fix memory leak in virJSONValueFromJsonC() d7b3be8ca3 secret: install service file only if init_script is 'systemd' 03f2672ab4 qemu: Fix IOMMUFD and VFIO security labels b7483e6558 security: Cleanup hostdev label error logic 75f698c77f security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel d704458b31 Post-release version bump to 12.2.0 6f0df1af01 Release of libvirt-12.1.0 496cccf47f news: Mention latency histogram support and (managed) save fixes 4a0424e2f3 Translated using Weblate (English (United Kingdom)) 39b3b2eb37 fdstream: fix EOF handling when reading data 774241017a fdstream: don't set return value if looping to read more data 656f51dd20 news: document bhyve changes for 12.1.0 b0e57a2b35 NEWS: Document features/improvements/bug fixes I've participated in 2c6fe784ac news: document new hyperv features 4374dbbbf0 qemu_hotplug: enter monitor in order to rollback passed FD fe782ed334 domain_conf: initialize network hostdev private data 10d5a41231 util: fix use-after-free in virIdentityGetSystem 633ac90d2b vmx: log full .vmx content 3d1e6d92de qemu: Fix job handling when domain dies in post-copy migration 634b40ccab po: Refresh potfile for v12.1.0 dbf3d81d24 Translated using Weblate (Chinese (Simplified) (zh_CN)) 82512796fe Translated using Weblate (Spanish) e943aff795 Translated using Weblate (Spanish) 8a1bd82f50 Translated using Weblate (Spanish) 29a53e39c0 Translated using Weblate (Czech) 92cbb0fcd7 Translated using Weblate (Greek) f88910b713 Translated using Weblate (Romanian) e39ce22996 Translated using Weblate (Greek) b713afcebd Translated using Weblate (Greek) 42eb8b6d0b Translated using Weblate (Swedish) ce5e429171 Translated using Weblate (Swedish) d507c85f93 Update translation files aa48051095 Added translation using Weblate (Chinese (Traditional Han script)) 5b6adb61c8 Translated using Weblate (Georgian) 6085f809ad bhyve: Default to ROM type for loader f051939111 news: Document support for uefi-vars device and firmwares 0151db88c2 virsh: Update for varstore handling 31e40b6229 include: Mention varstore where applicable bcda5b2efd qemu_command: Use uefi-vars device where appropriate 0ea04024ef tests: Add firmware descriptors for uefi-vars builds bcbb2667e2 security: Handle varstore file a32b4a6037 security: Mark ROMs as read only when using AppArmor 5dc97de2c4 qemu: Create and delete varstore file 41fe1199bb qemu: Introduce qemuPrepareNVRAMFileCommon() 0dd118ccee qemu_firmware: Generate varstore path when necessary df3121d21e qemu: Introduce varstoreDir da7eb72148 qemu_firmware: Fill in varstore information fa74aae490 qemu_firmware: Allow matching stateful ROMs ffe37c6989 qemu_firmware: Use of NVRAM implies stateful firmware 500c010df2 qemu: Fill in varstore element in domcaps 3d6987914b conf: Include varstore element in domcaps a440ada214 qemu_firmware: Report NVRAM template path for ROMs cab5b6532d qemu_firmware: Support extended syntax for ROM firmware descriptors d0c6aa084f qemu_firmware: Consider host-uefi-vars feature in sanity check 91337ee06d qemu_firmware: Split sanity check 83679d7338 qemu_firmware: Parse host-uefi-vars firmware feature 38c4c3f654 tests: Add firmware-auto-efi-enrolled-keys-aarch64 0653a2eae2 tests: Add firmware-auto-efi-varstore-aarch64 d8e0e9c3ce tests: Add firmware-auto-efi-varstore-q35 71d6399068 tests: Add firmware-manual-efi-varstore-aarch64 77b44120c5 tests: Add firmware-manual-efi-varstore-q35 bd35046517 qemu: Validate presence of uefi-vars device 12cdd61383 qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS 1c2dbdf3ac conf: Update validation to consider varstore element 3feee6d0ab conf: Parse and format varstore element b5da97c5b9 schema: Introduce osnvram define ccdff699ac tests: Rename custom JSON firmware descriptors 1504b7f687 conf: Move type=rom default for loader to drivers 375c82a0f8 qemu_firmware: Only set format for custom loader if path is present a03a820572 docs: Improvement related to firmware selection 38379f59c0 docs: Rename "BIOS bootloader" section to "guest firmware" 4d0c5bc5be hyperv: Add basic domainGetBlockInfo() API implementation 95d8909283 hyperv: Add resource subtype definitions 331a392b96 conf: support windows paths in virDomainDiskByName() 9b5831910f hyperv: add support for secure boot configuration 82ccd68755 hyperv: Clean up unnecessary header includes c07b4e91e3 qemu: saveimage: Use 'virFileWrapperFd' when loading non-sparse saveimage 0e2ab42778 qemu: driver: Merge 'qemuDomainRestoreInternal' and 'qemuDomainObjRestore' 72a65c6944 qemuSaveImageCreateFd: Handle case when 'virQEMUFileOpenAs' doesn't return a file fd for 'sparse' format 6a2a77b747 virfile: Introduce 'virFileFDIsRegular' 19d684706d qemuMonitorMigrateToFdSet: Drop 'flags' argument 0d3290d152 qemuSaveImageOpen: Remove wrong ATTRIBUTE_NONNULL e9b931d3e4 virpci: Report an error if virPCIGetVirtualFunctionIndex() fails edb3350c64 bhyve: implement domainGetVcpuPinInfo 387543c57f bhyve: support vcpu pinning 3ea0a44f7a qemu: Report error aborting stopped postcopy migration 6c2c9e21ac virstorageobj: Make virStoragePoolObjAddVol() report an error on failure dbdaf22b63 virsh: report "unknown" for autostart when API query fails da815a6a7b virsh: return failure exit code when UUID fetch fails f09d02bf0f news: Mention firmwareFeatures element for domaincaps cf4dfcf795 docs: Document firmwareFeature element for domaincaps 87c072c08b qemu: Fill in firmwareFeature element for domaincaps 928bdc3e67 conf: Add firmwareFeatures element for domaincaps 463322ec48 schema: Add firmwareFeatures element for domaincaps f335c578d1 tests: fix mocking on macOS f37e14119c iommufd: fix FD leak in case of error 75db232f90 tests: properly mock VFIO and IOMMU checks 63434db800 qemu: Fill iommufd domain capability 855f8fe9e2 conf: Introduce iommufd enum for domaincaps 5d16bef1a6 qemu_hotplug: Add support to hotplug host device with IOMMUFD 3f7ad3a8a5 qemu_command: Extract building IOMMUFD props to function 300ebf01b8 qemu_hotplug: Remove iommufd object if no longer needed b21b6dcc72 qemu: Save IOMMUFD state into status XML f67e4ac4d0 qemu_command: Don't use host property if IOMMUFD is used 4611f227c7 qemu: Convert vfioDeviceFd to qemuFDPassDirect df59beed37 qemu: Convert IOMMUFD to qemuFDPassDirect 4a80a0468e qemuxmlconftest: Set fake FD for IOMMUFD 15ad45758b qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData cb23831c02 qemuxmlconftest: Refactor host device preparation c83b4f367f qemu_process: Refactor qemuProcessOpenVfioFds d194f362f3 qemu_process: Fix FD leak with multiple host devices using IOMMUFD 7c062bfc4f qemu_domain: Add missing IOMMUFD cleanup 4b176cfc38 conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD 97eed30948 conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD 3365bff598 util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath 76b720168b qemu_process: Refactor qemuProcessOpenVfioDeviceFd 22c666097c util: Move openning VFIO device to virpci ff2848827f qemu_process: Refactor qemuProcessOpenIommuFd c684b83a68 util: Move openning IOMMU device to viriommufd 0c1af67be5 qemu: Move IOMMUFD validation to qemu_validate 4a0ea9bcf1 qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD cb33103c4a scripts: avoid matching 'char **' as string for systemtap 5787326541 qemu: Setup disk latency histograms on startup/hotplug/update b874c944bd Introduce support for disk operation latency histogram collection ad65b00c13 docs: formatdomain: Reword section about the '' element under disk driver 7da1a83914 docs: formatdomain: Fix indentation of docs for element ad4830ce68 qemu: monitor: Add handlers for 'block-latency-histogram-set' 237e49127a Expose latency histograms via 'virConnectGetAllDomainStats' 1c77d396ea qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' 42a39d703d qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' 1789a0f8a3 qemu: Extract disk setup done via QMP into a separate helper 11057abfd1 qemu: Wire up new hyperv host-model mode behavior 380fb89390 conf: Parse hyperv features even for host-model 79b05df9f8 bhyve: improve loader handling on arm64 e23fd0b7fd In virFDStreamRead(), fill buffer from this and next messages caf74fab50 bhyve: add capability probing for ACPI fc52d176ce bhyve: do not use deprecated IOAPIC option eaf1f15173 util: remove duplicate logging of firewall command 53d43ee5da docs: secret: Add documentation of secret encryption feature eb0b65e07a secret: Add functionality to load and save secrets in encrypted format bd6c201f9a secret: Rename virSecretObj structure attribute from base64File to secretValueFile 1c86748cf1 secret: Add secret.conf configuration file and parse it 97758bc9a0 secret: Set up default encryption secret key for the virtsecretd service ffc316e99a util: Add support for GnuTLS decryption 73a52dc108 qemuProcessRefreshDisks: Don't bother to refresh disks on cold boot 536646deaf qemuProcessUpdateVideoRamSize: Remove 'driver' argument and adjust callers 40b7e2a39b qemu: Refactor tray_status handling b9b9092c9c qemuDomainAttachDiskGeneric: Avoid unneeded disk property refresh after hotplug bc939353d9 qemuDomainDiskPrivate: Remove unused 'tray' field 8ae3835079 conf: domain: Add VIR_DOMAIN_DISK_TRAY_NONE state for devices without tray fac54e0d73 qemuDomainDiskInfo: Use proper type for 'io_status' a94d2b9871 qemuMonitorJSONGetBlockInfo: Don't fail if 'io-status' field gets new values 4666d19617 qemuMonitorJSONHandleMemoryFailure: Simplify error case and value extraction 25922c1fcb qemu: monitor: Add test validating that 'eventHandlers' are properly sorted 6f372d526f qemuMonitorJSONHandleMigrationStatus: Simplify error case ed94a8336a qemu: Drop 'removable' field from 'qemuDomainDiskInfo' 1292e757c6 qemu: process: Unexport 'qemuProcessRefreshDisks' 5b392ec976 qemuMigrationSrcBegin: Drop disk refresh step 52e09a7875 qemu: Drop 'empty' filed from 'qemuDomainDiskInfo' 56f7dd88d4 qemuProcessRefreshDiskProps: Drop code to remove disk source 074f7fba94 qemu: Remove 'removable' field from 'qemuDomainDiskPrivate' 861be1078e qemuDomainDiskInfo: Drop 'nodename' field 0d3ef7cb71 qemu: Implement support for persistent reservation migration control b0edb7eb9b qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR fb8d697554 qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-1114-gb3abdfa486' 5f5a2b0c8c qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-1114-gb3abdfa486' 06e7fee707 network: add comment to table that it belongs to libvirt aa802b8723 hyperv: Implement virDomainInterfaceAddresses() a422ebb178 hyperv: Move MAC parsing into a separate function 7fdc9111d2 virsocketaddr: Introduce virSocketAddrSubnetToPrefix() fb317b296d datatypes: Declare autofree func for virDomainInterface type 8e377728c5 nwfilter: move shared nwfilter driver functions into nwfilter_tech_driver.c 6e101ad0c7 nwfilter: remove redundant sys/utsname.h include a82cc0c435 nwfilter: rename generic names to virNWFilter* and CamelCase 7136e9155a docs: add description for USB port matching f0cdc0fca4 nodedev: add USB port to nodedev XML b97afe28f5 tests: validate an XML config with USB bus/port set 53e8f30dc8 schema: add USB port attribute 7a888d722c conf: add support for host USB port matching 73677f062f util: implement support for finding host USB devices by port 4b97cdd1a5 util: generalize the host USB device search APIs 93e1f5ee96 virusb test data: add devpath files for port addressing fc5840b498 qemu: Ignore cmp_legacy CPU flag afe6e5d260 virsh: Switch cmdDomIfAddr() to vshTable 9373d8da6a qemu_command: Generate granule prop for virtio-iommu 2eea8e3829 qemu_validate: Check whether granule of virtio-iommu is supported 43892d9915 conf: Introduce granule attribute for virtio-iommu 17693931e6 qemu_command: Generate aw_bits prop for virtio-iommu 2fccdda851 conf: Allow aw_bits for virtio-iommu befdd44bf8 qemu_capabilities: Introduce QEMU_CAPS_VIRTIO_IOMMU_AW_BITS e1c6e3fef0 conf: Teach virDomainParseMemory() new retval b4c792313a hyperv: Avoid memleak in hypervDomainDefParsePhysicalDisk 090223d01a src/esx/esx_vi.c: Debug path element comparisons 29aa558642 bhyvexml2xmltest: Avoid leaking driver caps 720f71c1da bhyvexml2argvtest: Avoid leaking firmwareDir 210cae66e0 bhyvexml2argvtest: Don't leak parts of driver config f0af542077 bhyvexml2argvtest: Avoid leaking driver caps fcc5910557 bhyvexml2argvmock: Provide virCPUProbeHost() 2f1421d83b bhyve_command: Avoid memleak in bhyveBuildNetArgStr() df2cb810a3 bhyve_command: Avoid leaking @buf in virBhyveProcessBuildBhyveCmd() 1ce8c35c29 bhyve: Avoid leaking @addrs in bhyveDomainAssignPCIAddresses() 1779a8600f bhyve: Avoid memleak in bhyveParsePassthru() bf34b90bb4 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps a4f610ff3f qemu: migration: Always offer block dirty bitmaps during migration 0c75fc1747 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps b2fe3465de qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data 71643c197e qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' 864a70114f rpcgen: Pass XDRPROC_T_3ARGS to test_demo.c 2c66b6d72c build: add detection of xdrproc_t arguments count 74fc02d792 tests: qemuxmlconfdata: provide iommufd sample XML and CLI args 7d2f91f9cb qemu: Update Cgroup, namespace, and seclabel for iommufd 2f0999a161 qemu: open iommufd FD from libvirt backend f623080472 qemu: open VFIO FDs from libvirt backend f91a07d0c8 qemu: Support per-process memory accounting for iommufd 1043e04e17 qemu: Introduce privateData for hostdevs fd113055bb qemu: Implement support for associating iommufd to hostdev 203002249b tools: Fix chown syntax in virt-pki-validate.c (dot -> semicolon as owner and group separator) b9d9ff39d3 qemu: introduce the "virtualization" feature ca98f39e64 networkxmlconftest: Expect success for "hostdev" case only on Linux e7c6f06747 ci: regenerate with 'lcitool manifest' 240deda72c tests: Rename networkxml2xmltest to networkxmlconftest 8f5e0903d6 tests: Drop networkxml2conftest c26c7b1cd3 networkxml2xmltest: Do conf test ee8381e729 networkxml2xmltest: Sync test cases with networkxml2conftest 369020180a networkxml2xmltest: Store parsed def for future tests 2d6a376ec0 networkxml2xmltest: Dynamically allocate testInfo struct 5b2ed0d137 networkxml2xmltest: Move path generation into testRun() c24157056f networkxml2xmltest: Introduce testRun() 04034eeb34 networkxml2xmltest: Don't recreate xmlopt object eff3431dca networkxml2conftest: Allow regenerating more in one run 30baa49454 networkxml2conftest: Allow regenerating hosts file 319bbb5c84 networkxml2conftest: Avoid potential leak ecb2e06bdf test: wire up networkValidateTests() 4b98a649b3 network: Introduce networkValidateTests() 7c9b883eb3 networkxml2xmltest: Update couple of test cases d07d7a6842 networkxml2conftest: Fail tests where no dnsmasq would be spawned 82040ddce7 networkxml2conftest: Drop routed-network-no-dns test case 794338569d network: Move decision on dnsmasq need into a separate function e047ae9ec3 network: Separate private APIs declaration to bridge_driver_priv.h 9d6f5ac1f3 tests: Avoid crossdir inclusion for networkxml2* tests 13889feb14 esx: Switch to creating URLs using virURIFormat e013d5b5ca esx: Abstract all URL-creation code into one function 38c952d893 esx: Debug URL just before opening with curl 6bb982178b qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails f1ad521936 virDomainSnapshotDefAssignExternalNames: Improve error message 6bcdf4ee59 qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' 452c281aee qemuSnapshotUpdateBackingStore: Remove stale comment b43aee9cc9 qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument 65c7369107 qemu: Connect NVMe devices to PCIe bus 27fd2e97b8 Fix printf style used with virDomainIOMMUDef::aw_bits 4009126f17 src: Use device alias when ifname is unset in virDomainInterfaceAddresses() 3a10f435b7 libvirt-domain: Fix documentation of virDomainInterfaceAddresses() 6f07a8e6fc util: Remove @masked argument from virSocketAddrFormatWithPrefix adcc14e153 qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice 0cd13906dc qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument fa06437566 qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop abcdc9511b qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length 27141859f1 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (aarch64) 2425a570e3 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (x86_64) a1476a5afc qemuxmlconftest: Prepare 'fd-memory-numa-topology4' for removal of 'pc-i440fx-5.0' be58c0eaa2 qemuxmlconftest: Remove specific machine type from 'devices-acpi-index' f9cec072c4 qemuxmlconftest: Freeze 'cpu-numa-memory-oldstyle' case to qemu-10.2 70d7458186 virnetdevtap: Produce more helpful error message in virNetDevTapCreate() 845210011a esx: Allow connecting to IPv6 server e0dcf278af bhyve: workaround for the lack of UTC clock on ARM64 7b889af2d2 virt-aa-helper: Ask for no deny rule for readonly disk elements 28482f2630 syntax-check: Introduce sc_prohibit_local_with_subshell rule 2442030856 libvirt-guest.sh.in: Fix logical error in guest_is_on() 8f0cf96b66 libvirt-guests.sh: Declare and assign separately to avoid masking return values 7a0c2fba91 scripts: don't import shutil in meson-warnings.py 50ad6026ad ci: regenerate with 'lcitool manifest' 43358229fe meson: write all warning flags to 'c-warnings.txt' 50640d35ae src: remove some -D defines from compiler args a643671150 util: Fix max socket calculation dcffd15520 conf: simplify check for vlan tagging support in virDomainActualNetDefValidate() 91a2d813cb conf: validate that specified interface type supports vlan tags 3190150ebd qemu: use actual/effective vlan when updating OVS-based interface vlan tag b5a406a768 qemu: update vlan tag of macvtap (direct) passthrough devices during update-device 17976f6b2a qemu: forbid modifying network device portForwards with update-device 2e4abf4479 conf: new function virDomainNetPortForwardIsEqual() 878c5d2fa3 util: fix equivalence of AF_UNSPEC virSocketAddrs be9885c274 nwfilter: rename ebiptables unit tests and data files 289e4cbc67 domain_logcontext: Don't assume remote driver is always available 5b080bc580 qemucapabilitestest: Add 'caps_10.2.0_aarch64' test data 095e133645 qemucapabilitiesdata: Regenerate 'caps_10.2.0_x86_64' replies d917bf662b qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices 37d51c0d27 qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type badb0a8526 Align help text of virt-aa-helper with actual expectated input 05a2ad8321 syntax-check: Introduce sc_prohibit_g_autofree_const rule adb19c902b network: Drop const for forwardIf in pfAddNatFirewallRules() 973aa66571 hyperv: Drop const for resourceType in hypervDomainAttachSerial() b3a491284a rpm: disable -Werror on ELN builds bdcf0c35bb Post-release version bump to 12.1.0 4d93728466 Release of libvirt-12.0.0 0ad017a6de NEWS: Mention shared FS detection race b84e6d1b31 NEWS: Document features/improvements/bug fixes I've participated in 10a523c62a NEWS: Mention JSON nesting bug and TPM migration quirk with NFS 98329e4f12 Translated using Weblate (Korean) 49b8f0a814 Translated using Weblate (Swedish) abe668561d Translated using Weblate (Portuguese) 8d5fdea287 news: document bhyve new features for 12.0.0 c44aecc40d Update translation files 0355b2d05a po: Refresh potfile for v12.0.0 e361469ebb Translated using Weblate (Spanish) 981ffc65af Translated using Weblate (Spanish) 80879c113f Translated using Weblate (Spanish) a1c93eab00 Translated using Weblate (English (United Kingdom)) 9ad5974ecb Translated using Weblate (Spanish) 2657b10746 Translated using Weblate (Spanish) b08fe254d2 Translated using Weblate (Georgian) c91c477648 Translated using Weblate (Spanish) e8e555b625 Translated using Weblate (Czech) 855527bab5 Translated using Weblate (Georgian) 20b0880ab6 Translated using Weblate (Czech) 92b77582d4 Translated using Weblate (Swedish) d557623281 news: Mention improvements and fixes to firmware selection 563a47ea7f qemu_firmware: Allow matching both UEFI and BIOS for ROM loader 9a041e61ec qemu_firmware: Don't skip autoselection for ROM 1b78d647da qemu_firmware: ROM firmware is always in raw format 8d1bfa69b2 tests: Add firmware-manual-efi-tdx f65ef07dcf tests: Add firmware-manual-efi-sev-snp 0aa3fa2d62 qemu_firmware: Remove NVRAM to loader format copy hack 798528d2b6 qemu_firmware: Take NVRAM format into account when matching 623fc1b4b5 qemu_firmware: Take templateFormat into account when matching 91b6dee6d1 qemu_firmware: Retain user-specified NVRAM format a92c140956 qemu_firmware: Prefer template format to loader format ab8efe6fd0 qemu_firmware: Refactor setting NVRAM format ee4c619b09 qemu_firmware: Simplify handling of legacy paths 3e1c110a4d qemu_firmware: Set templateFormat for custom paths 3acdcd2eb7 qemu_firmware: Introduce qemuFirmwareFillDomainCustom() 9ec9bdc8dc tests: Add firmware-auto-efi-format-mismatch-nvramtemplate 935879fb91 tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 a4f33d7228 tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path ab92d77339 tests: Add firmware-auto-efi-format-nvram-raw-loader-path c8536599f2 tests: Add firmware-auto-efi-format-nvram-raw 13ce34e646 tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths 17979f08b9 tests: Add firmware-manual-efi-nvram-template-nonstandard-format 2bd0499294 schemas: Allow templateFormat without template path 876a5d34d4 qemu_firmware: Drop fallback for absent nvramTemplateFormat 3463e543fe qemu_firmware: Ignore stateless/combined when NVRAM is configured c74adb33e4 domain_validate: Reject ROMs with format other than raw 5bae6e3640 tests: Add firmware-auto-efi-format-loader-qcow2-rom a5ae34aa74 domain_validate: Reject read/write ROMs 26035762a9 tests: Add firmware-manual-bios-rw 07bcd51bcb tests: Add firmware-auto-bios-rw 46970217a8 domain_validate: Reject NVRAM with read/write firmware 27313799ba tests: Add firmware-manual-efi-rw-nvram 4df091dea4 qemu_firmware: Move copying of nvram.format to loader.format 5b374c5e3f qemu_firmware: Move format=raw compat exception aaa0db64b4 qemu_firmware: Drop 'nvram' local variable 3f7eea0e17 qemu_firmware: Drop support for kernel descriptors 86a4ede0ec qemu: capabilities: Update 'caps_10.1.0_x86_64+inteltdx' after release 28015f020c qemu: capabilities: Update 'caps_10.2.0_x86_64+mshv' after release 1be917837e qemu: capabilities: Update '10.2' capabilities on x86_64 after release 380764992d qemucapabilitiesdata: Re-generate 'caps_10.2.0_x86_64' 0bdf8188d6 esx_util: Drop extra spacing 6c9d2591c6 esx: URI encode inventory objects twice ffe74c7c55 esx_util: Introduce esxUtil_EscapeInventoryObject() 871a8f872d qemu: fix locking in qemuProcessHandleMemoryFailure 32749427de network: fix memory leak in leaseshelper.c d50de61f34 bhyve: report domain capabilities for arm64 1b0c9d21b7 bhyve: tests: add xml2xml arm64 tests eaeb1712a7 bhyve: tests: prepare for arm64 xml2xml tests 8c971cdce1 bhyve: command: handle arm64 bootloader 24be4b8c0c bhyve: command: make -H and -P args amd64-only 90df4b6795 bhyve: command: handle arm64 console c3c8c7e8cc bhyve: domain: require ISA controller on x86_64 only 35b99f4994 bhyve: tests: support arch-dependent tests c957dea309 bhyve: capabilities: fix for arm64 ca3cbae5af virQEMUSaveDataNew: Refactor cleanup ccf008b85f qemu: snapshot: Check earlier if memory snapshot is possible ac8d241620 qemuSaveImageCreate: Remove 'driver' argument a8a62682fd qemuSaveImageCreateFd: Remove 'driver' argument d4a5183674 qemuMigrationSrcToFile: Remove 'driver' argument 5d0d55f238 qemuMigrationSrcToSparseFile: Remove 'driver' argument 073306b4ad qemuDomainEventEmitJobCompleted: Remove 'driver' argument 256ce775d9 qemuMigrationSrcToLegacyFile: Remove 'driver' argument c6988fdb2f qemuHotplugAttachDBusVMState: Remove 'driver' argument a175096c37 qemu: snapshot: Don't overwrite 'ret' in qemuSnapshotCreateActiveExternal d86259d5a7 docs: bhyve: document virtio-scsi support 790719be6b bhyve: add virtio-scsi support 1001371fba conf: introduce CTL storage type 6df374fefc qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX 8e9a9f86b0 qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX 40f8bed857 libvirt-guests.service: use Type=exec b3ede6618d tools: check for failure decoding secret base64 value 2d65cdeba8 docs: fix broken UUID example 16804acf14 virjsontest: Add test for nesting depth b49d41b7e9 util: json: Increase JSON nesting limit when parsing to 300 bfd1a1a885 bhyve: rework capabilities probing d3735f71ec tests: Remove temporary TZ parsing workaround a54cafa62b news: Fix indentation e727c8afad network: Propagate DNS forwarder port into dnsmasq config 72e4efbfa6 network: Introduce port for DNS forwarder dad8b0fc52 bhyve: bhyvexml2argvtest: fix SLIRP tests 437c135671 docs: drvbhyve: document SLIRP networking ffa6b2e892 bhyve: implement SLIRP networking 2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x Signed-off-by: Bruce Ashfield

libvirt: update to v10.10.0

2025-12-15T16:01:15+00:00

Bumping libvirt to version v11.10.0-35-g2df30bca10, which comprises the following commits: 2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x c9f45792b7 virfiletest: Fix build on non-Linux eedf9ed68b util: Rework virFileIsSharedFSOverride using virFileCheckParents 3a44f0c23d util: Fix race condition in virFileIsSharedFSOverride b6addd42be util: Fix race condition in virFileIsSharedFSType 121d179e06 tests: Test virFileIsSharedFSOverride 5ca7d3227d qemuMigrationParamsForSave: Don't take opaque 'flags' 61ae36fa0b qemuMigrationSrcToFile: Don't cross-contaminate 'flags' variable 4469a61553 virsh: Add completer for '--image-format' option of 'save' command 1e2a71be0f include: Create constants for save image format values 22c5ce995b qemu: conf: Use proper type for (save|dump|snapshot)ImageFormat cad980c83f qemu: Use 'virQEMUSaveFormat' type everywhere except qemu_conf 7c0778deb7 qemuSnapshotPrepare: Prohibit 'manual' disk snapshot mode with VIR_DOMAIN_SNAPSHOT_CREATE_QUIESCE flag 627bcc8525 qemu: snapshot: Setup disks for manual snapshot only when the VM is actually paused 881aec23f8 qemuMigrationSrcToFile: Don't leak 'qemuFDPass' in cleanup path b98d29e022 qemu: Treat memory device source nodemask as strict NUMA policy b9abe20ce3 qemuxmlconftest: Introduce memory-hotplug-numa-preferred test case 60d5428d87 qemu.conf.in: Fix some typos d56d056094 qemu: tpm: Account for possible migration without actually sharing storage fe22d80c0c NEWS: Mention the passt hostname and fqdn attributes da4305b7bc qemu: Use pci_bus to identify multi-smmuv3 model 45ff1c0026 tests: add test for a single per-device smmuv3 86d8c3e331 ci: refresh with 'lcitool manifest' 414c5b11bf lib: Avoid changing const strings via strchr() and friends 821a028c5d iptablesPrivateChainCreate: Avoid modifying const string 5230ca5404 iptablesPrivateChainCreate: Switch to STRSKIP() 33c486f4fd iptablesPrivateChainCreate: Rename @tmp variable 1d95cee608 virSkipSpacesBackwards: Turn @endp into const 1b8d108c64 virfirewalltest: Introduce testIPtablesSetupPrivateChains() b3e48f9470 virstringtest: Introduce a test for virSkipSpacesBackwards() 141cf9c11f vircommand: Update documentation to virCommandSetDryRun() 216cb57ef6 cpu_map: update vmx-* features 0742c15d40 cpu_map: fix sync script to extract correctly vmx-* features 6a3fe7f7e0 spec: Fix RPM build when %{fedora} is undefined fce7fabd53 Post-release version bump to 12.0.0 cd16a1e913 Release of libvirt-11.10.0 c7733935a5 Translated using Weblate (Spanish) 2504f6f99b NEWS: Mention CVE-2025-13193 and improvements for block stats/config and backups f625585788 rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44 ad76c59450 news: document improved certs, host validate details & TDX fix 54f3472d72 formatdomaincaps: Fix typo in Hyper-V Enlightenments section e60c21fc3f NEWS: Fix incoming migration to QEMU 10.0.0 6cd0d7951a NEWS: Add CVE-2025-12748 70f5a75f78 NEWS: Document features/improvements/bug fixes I've participated in df0d1c915d src: fix redundant/misleading build conditional for KVM MSR code 40f5e37ff3 Translated using Weblate (Chinese (Simplified) (zh_CN)) 6b1a32f1cc Translated using Weblate (Ukrainian) 67b8836be1 Translated using Weblate (Portuguese) 2e727417ac Translated using Weblate (Korean) e2a0af28df ci: refresh with 'lcitool manifest' c58ee467ad NEWS: Document Hyper-V virttype for Qemu Domains ead8915a7e Update translation files faa5c69899 po: Refresh potfile for v11.10.0 44118a7a70 Translated using Weblate (Italian) a4563be866 Translated using Weblate (Portuguese (Brazil)) 18cbdffec7 Translated using Weblate (Chinese (Simplified) (zh_CN)) 7f343d454b Translated using Weblate (Czech) cec8eb4a49 Translated using Weblate (Czech) afcfc6b8c4 Translated using Weblate (Korean) 8a16508bdb Translated using Weblate (Portuguese) 33b512a7de qemuxmlconftest: Update 'aarch64' tests using 'virt-4.2' machine type f6212a4ff2 qemuxmlconftest: Update 'aarch64' tests using 'virt-4.0' machine type 3fab3ea57e qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.2.0-rc1-38-gfb241d0a1f' 59685009ee NEWS: mention VNC 'wait' attribute for bhyve 3a2127bef1 docs: bhyve: document VNC's wait attribute 4176cdc978 spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer c1576ad519 Add support for 'dpofua' setting for SCSI disks b1a2ea971d virDomainDiskDefCheckABIStability: Add missing check for 'removable' property eadbb34a8f docs: page.xsl: Convert repository edit URI into a parameter 361106506b docs: site.xsl: Use separate 'asset_href_base' and 'link_href_base' 071d29b726 docs: css: Split out any main-page CSS to local.css 5ca7270c08 docs: index: Link to security notices from home page 895a973c49 kbase: Add note about preserving VM on shutdown to backup article eca6a92a6d qemu: backup: Add support for VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN 56432ed065 lib: Introduce VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN flag 4453331b89 lib: Introduce VIR_DOMAIN_EVENT_SUSPENDED_GUEST_SHUTDOWN event reason 8e5b0cd450 qemuBlockJobProcessEventConcludedBackup: Notify the backup job later 0fe378f1b1 qemu: backup: Don't attempt to stop the NBD server twice 7d90085e12 qemuProcessReconnect: Continue reconnection if VM untergoes fake-reboot 18ceb1002d virDomainNestedJobAllowed: Allow VIR_JOB_MODIFY_MIGRATION_SAFE if VIR_JOB_MODIFY is allowed baf5f7b0ee qemu: always report s390 prot-virt feature in domain caps e98a12d133 qemu: always report TDX feature caps on x86 62d14ba496 qemu: correctly detect working TDX support dac28c6185 docs: describe support for multiple certs & PQC config 59a65f4987 rpc: support loading multiple certificate identities ba8e1720aa rpc: reduce duplication when locating credentials 375ab122d5 rpc: move file access checks into TLS config API 88a7a57806 rpc: skip fallback when using custom PKI path 289d554998 remote: support specifying multiple keys/certs in libvirtd.conf d249170bf6 rpc: add support for loading multiple certs & keys 74a664edd7 rpc: refactor TLS sanity checking to support many cert files 9aff986bc4 rpc: change 'isServer' parameter from 'int' to 'bool' 86143735a6 remote: use g_strfreev for free()ing lists of strings 65d21c8692 domain_addr.c: update virtconsole port reservation comment and allowZero var 2083efe030 domain_addr.c: Fix virtio console port autoassign on virtio-serial bus 22059030f9 tests: Add console-virtio-serial-autoassign-address tests e9f74bbdba src: cap the data size in stream I/O functions 2e595888aa include: fix version for recent block stats constants 3e33e91c5d tests: qemuxmlconftest: Add case for hyperv domains 9290014103 tests: qemucapabilities: Introduce MSHV capability 33e716a56d tests: Add domaincaps case for mshv 82b40953a0 conf: Fix virttype handling in schemas 7b752b98f1 qemu: conditionally add /dev/mshv to acl ba40f678f4 qemu: use mshv accel for hyperv domains c852d9ca3c qemu: Append mshv to hwaccel list. 6d0702f4cc qemu: Query and use mshv capabilities 3b7edf755d qemu: Introduce mshv capabilities 029933be86 qemu: only allow enabling deprecated features that are supported 906f0e448a qemu: query and cache static/host deprecated features 82eb7690a0 qemu: refactor load/format of deprecated features 8403817182 qemu: rename modelinfo's deprecated_props to full_dep_props 37b0b74b48 tests: Don't link vmx2xmltest with esx_lib 7d5a1a5384 Edit apps.rst to add Apache CloudStack in the IaaS section. 4ab1e25f6e qemu: Remove redundant kvm group config in sysusers.d 6bc397eb23 cputest: Skip test for Intel(R) Xeon(R) 6788P CPU when QEMU driver is disabled 047affcbd0 tests: skip vmx tests when ESX is disabled f1c8c9a1e8 build: drop userfaultfd_sysctl option 7b471c563f tests: qemuxmlconfdata: provide device-pluggable smmuv3 sample XML and CLI args 4d6419b286 qemu: Implement pluggable-device smmuv3 e70c4d54d3 conf: Support multiple device-pluggable smmuv3 IOMMUs d97bc25b82 qemu: Format IOMMU devices after controllers a523920171 qemu: make qemuBuildDeviceAddressPCIGetBus more generic 5944f566ac bhyve: support VNC 'wait' attribute c8bffda588 conf: introduce 'wait' attribute for VNC ec501bdc5e tools: inform user which hardware virt was found during validation e6d8983cdb tools: be explicit about failure to find x86 secure virt 785c9fd512 tools: inform user which CVM is found during validation f44e2ecc5b tools: inform user which IOMMU was found during validation c0f42f4d76 tools: allow passing details for passed validation tests fa15860ac1 vmx2xmltest: Add a test case for disks in subfolder 07d3cc9d57 esx: Allow disk images in subdirectories f82d30307d vmx2xmltest: Drop custom file name parse function 29ddffbe6c tests: Introduce vmx2xmlmock ad92def79e esx: Make esxVI_LookupDatastoreByName() mockable c3a927c121 esx: Make esxVI_LookupDatastoreHostMount() mockable bdd681f9b2 esx: Make esxVI_LookupDatastoreList() mockable 3ccb15006a esx: Expose esxParseVMXFileName() for tests 6db235e913 libvirt_esx.syms: Put proper header file name into comment 4ae5351a50 docs: domain: add watchdog notification support 475ed7075d qemuDomainPrepareDiskSourceData: Setup 'detect_zeroes' for all layers 312be5eb9a qemuxmlconftest: Improve coverage of 'disk-detect-zeroes' test case f5bb1ae77b selinux: Mark anything using content_context as shared 5616eaf63e selinux: Add is_shared plumbing to RestoreFileLabel f4903ebcf7 selinux: Don't remember labels for shareable SCSI devices 3a611df5b1 selinux: Match remember/recall arguments for SavedStateLabel cf0806477b bhyve: s/provconn/privcon/ a379327d8a qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots 2a326c415a qemu: Check ACLs before parsing the whole domain XML eb4322dfe8 ch: Check ACLs before parsing the whole domain XML 7285c10a7e vz: Check ACLs before parsing the whole domain XML a6dcfee896 lxc: Check ACLs before parsing the whole domain XML a1f48bca07 libxl: Check ACLs before parsing the whole domain XML b45f10bc0a bhyve: Check ACLs before parsing the whole domain XML e6de1e43ab conf: Add virDomainDefIDsParseString 05baaddb3f virXMLFormatMetadata: Don't modify deprecated 'xmlIndentTreeOutput' f307c7dc0c virVBoxSnapshotConfSaveVboxFile: Don't modify deprecated 'xmlIndentTreeOutput' a181d99cba bhyve: domain: improve disks validation b3e1e9a187 bhyve: domain: refactor bhyveDomainDeviceDefValidate() 26a9c7d840 bhyve: support queue configuration for NVMe disks 52bddfd65c conf: domain_validate: make disk queue configuration driver specific f81e5158d4 docs: drvbhyve: add guest-specific nodes section b2c7dba3eb docs: drvbhyve: improve the manpage link f4751e23d3 docs: drvbhyve: document device passthrough 15833693e6 meson: default to system crypto policies where available 81ce368347 ch: Sort driver sources and drop header files b224d2b377 ch: Assign device alias early 85cf0e4f17 ch: Set transient domain definition 7e5d224536 ch: Use correct domain definition in chDomainGetXMLDesc() 29195b7b17 ch_process: Avoid memleak in chProcessAddNetworkDevice() bf34b3c86f domain_capabilities: Use virXMLFormatElement() in FORMAT_PROLOGUE and FORMAT_EPILOGUE macros d2d442d79d domain_capabilities: Check NULL in FORMAT_PROLOGUE b20ae99e1d domain_capabilities: Rework virDomainCapsCPUFormat() 166fad633a domain_capabilities: Rework virDomainCapsCPUCustomFormat() 132ba55a00 domain_capabilities: Move indentation adjustment out of virDomainCapsCPUCustomFormat() 238be79bb9 bhyve: auto-assign PCI addresses for hostdevs 43579767f4 bhyve: Tie the 'passthru' option to the 'hostdev' XML config 447252a54c bhyve: Advertise hostdev support e4056c458a bhyve: Support passing the 'passthru' command line option 4714272b39 bhyve: process: improve domain startup error handling afafb2a28b cpu_map: Add YongFeng-v3 CPU model a6000b20ba cpu_map: Add YongFeng-v2 CPU model 98b4609b51 cpu_map: Add YongFeng CPU model db80641510 cpu_map: Add features used by Zhaoxin YongFeng Processor 56ee1bfb7a cpu_map: Add Zhaoxin CentaurHauls CPU vendor ee95c9d7d1 cpu_map: Add EPYC-Turin CPU model f37126bc55 cpu_map: Add EPYC-Milan-v3 CPU model 0fcde0edc5 cpu_map: Add EPYC-v5 CPU model d2925f23e7 cpu_map: Add EPYC-Rome-v5 CPU model 7e8f1698c7 cpu_map: Add EPYC-Genoa-v2 CPU model dec859cb66 cpu_map: Add ClearwaterForest CPU model b8d830ff54 cpu_map: Add GraniteRapids-v3 CPU model cbc2f8e2b3 cpu_map: Add SapphireRapids-v4 CPU model bd43aa4cbb cpu_map: Add SierraForest-v3 CPU model 64143828d7 cpu_map: Add SierraForest-v2 CPU model 189d7b64ac cputest: Add data for AMD Ryzen 9 9950X 16-Core CPU 034f02d25c cputest: Add data for Intel(R) Xeon(R) 6788P CPU b7c92ce918 cputest: Read more MSRs in cpu-data.py a3395fb598 cputest: Ignore missing MSRs in cpu-data.py 21c61bee36 sync_qemu_models_i386: Support adding models to an empty group d3888c470a sync_qemu_models_i386: Handle unknown features in GraniteRapids-v2 b74b452f8a sync_qemu_models_i386: Print current model for unknown features 58972035bd sync_qemu_models_i386: Fix typo in CPUID_8000_0021_EAX_No_NESTED_DATA_BP 96df5805fd cpu_map: Fix ordering of CPU models in meson.build a86973056a cpu_map: Add feature for detecting Indirect Target Selection immunity 81c20d2c32 cpu_map: Add feature for detecting Branch History Injection immunity c80b283277 cpu_map: Add features for Transient Scheduler Attacks mitigation b72758d62a cpu_map: Add a few missing features to 0x80000021 CPUID leaf 819ce69b38 cpu_map: Add msr-imm CPU feature a088734d57 scripts: do not use uninitialized variable 1ff3d18528 tools/nss: check for missing array element f1e59f961d src: check for invalid stream in virStreamInData 15c9ca383c scripts: use subprocess.run instead of os.system 7db2138dc9 qemu: Use query-accelerators to query accelerators 4c266d53e8 qemu: Introduce query-accelerators cap 878470256e src: report error from failing to add timer/FD watches 9b7ef8058b conf: Don't leak virDomainDiskDef's 'statistics' member 7ee9dbacbe qemu: Add support for enabling timed block device statistics collection 19fc614d53 conf: Add configuration option for timed disk statistics collection 1c4234b34e qemu: capabilities: Introduce QEMU_CAPS_DISK_TIMED_STATS 166be0d48c Expose qemu timed block statistics via bulk stats API 6914b4f2a5 qemu_monitor: Extract 'timed_stats' of block devices d1eafbe88b Expose qemu storage request limits via bulk stats API c33e5971b1 qemu: monitor: Extract block limit values c177003d4d qemucapabilitiestest: qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.1.0-1969-g53b41bb789' ed0f489352 qemu: capabilities: Fix logic for formatting 'reconnect' parameter d0316c24ca qemu: capabilities: Retire QEMU_CAPS_CHARDEV_RECONNECT ce0c3e0ea3 qemucapabilitiesdata: README: Add rules for dumps of unreleased qemu 5e8698aa76 ci: Refresh with 'lcitool manifest' b100dabd6d rpm: change from fuse-devel to fuse3-devel 258bb23e94 Remove arm from KVM arches ba16113c76 qemu: Ignore "ht" CPU feature 4d5c1bc241 qemu_monitor: Filter CPU features reported by QEMU c15ae99dab qemu_process: Always fix CPUs on reconnect 2ab6925218 qemu_domain: Fix qemuDomainFixupCPUs fbf44bc8cf qemu_domain: Simplify qemuDomainFixupCPUs fd6cf1b44a cpu_conf: Make virCPUDefFilterFeatures return void 3c7e44d3c8 Post-release version bump to 11.10.0 91f3e8b667 Release of libvirt-11.9.0 cdbb3bc8d7 NEWS: mention 'manual' snapshot mode improvement 73b99b2ba0 Translated using Weblate (Portuguese) 4bc00fd6da Translated using Weblate (Portuguese) d31a4a2c78 Translated using Weblate (Portuguese) f80eec7eab NEWS: Document features/improvements/bug fixes I've participated in 05ca6be8a6 Translated using Weblate (Ukrainian) b59bed2603 Translated using Weblate (Portuguese) 63e989cc26 docs: drvbhyve: document NVMe device cc2b022c35 NEWS: document bhyve changes for 11.9.0 86bba8f1d9 drvch: Document config file locations 3299ce060f ch: Load ch.conf from SYSCONFDIR 4c5021bc92 drvch: Demote example section to a subsection a96a4b04e1 docs: Document supported URIs for CH driver 47683ca63d Update translation files 339ff29e5d po: Refresh potfile for v11.9.0 fa89c178a5 domain_conf: Avoid memory leak in virDomainMemoryDefFree() ccc0538329 NEWS: Document virtio options for memory models e6d1cb69d5 qemu_command: Generate virtio options for memory device 4848c85053 conf: Introduce virtio options for virtio memory models 3c6d7f2705 qemu: Use virDomainMemoryIsVirtioModel() 0d46a1f4d5 conf: Introduce virDomainMemoryIsVirtioModel() 6787f82cfc domain_conf: Switch to virXMLFormatElement() in virDomainMemoryDefFormat() 30eab13fc9 domain_conf: Make virDomainMemoryDefFormat() return void 93c4b1bf55 bhyve: support specifying disk rotation rate 4d70b2c783 bhyve: nvme: check if NVMe is supported by bhyve a997aee58f bhyve: do not allow more than one NVMe device per controller 8d9bf732a7 bhyve: tests: cover 2 NVMe devices on 2 controllers case 79e46b1698 bhyve: implement NVMe device support 1ab27a5b96 Translated using Weblate (Italian) 6038ed07c2 Translated using Weblate (Spanish) d207136b5d Translated using Weblate (Finnish) 02266588b4 Translated using Weblate (Russian) 92e1519395 Translated using Weblate (Portuguese) 0a30b6d2e5 qemuDomainBlocksStatsGather: Fix blockstats gathering after refactor f6ea64f182 conf: never reject overrides be638396f0 NEWS: ch: announce network hotplug feature 058df74ed6 ch: implement network device hot detach 92441ba35a ch: implement network device hot attach 6a4c59e993 ch: add net device alias assignment b90cf0c916 apparmor: Allow AMD-SEV device access for AMD-SEV VM d8d3595851 qemu: Drop /dev/kvm from default device ACL f3f8408975 NEWS: Document Hyper-v never notify feature for spinlocks 66a47f8049 qemu: Update hyperv spinlock retries count default d0de1b89be qemu: Fix hyperv spinlock retries count type mismatch 6862969cf8 qemu: forbid readonly attribute for externally launched virtiofsd 69e5ad478e qemumonitorjsontes: Properly free blockstats 45f49ad340 Remove qemuMonitorBlockStatsUpdateCapacityBlockdev 5b0fd22920 qemuMonitorJSONGetAllBlockStatsInfo: Directly probe data from 'query-named-block-nodes' a189ad03bb qemuMonitorJSONBlockStatsUpdateCapacityData: Merge into caller 5485e7e832 qemuMigrationCookieAddNBD: Use qemuBlockGetNamedNodeData to fetch the capacities 58aa005f3e qemu: monitor: Rework qemuBlockStats into a g_object d35e519dca qemu_monitor_json.h: Use consistent function hader coding style 6773f77dad qemu_monitor_json.c: Use consistent function hader coding style 74ca46972f qemu: monitor: Remove qemuMonitorQueryBlockstats 96980df098 virNetDevVlanParse: Refactor cleanup e412761206 virNetDevVlanParse: Use g_autofree for temporary variables 40c4e4c847 virNetDevVlanParse: Don't clear data on failure 4c32ad3469 qemuxmlconftest: Add example for "sgio='filtered'" disk option 1ebee849db docs: snapshot: Add a note that blockjobs ought to be avoided with 'manual' snapshots 69e066c0ba qemu: snapshot: Allow snapshot consisting only of 'manual'-y handled disks 2e19e68093 qemu: snapshot: Deactivate block nodes on manually snapshotted disks f879d5f403 qemu: migration: Don't reactivate block nodes after migration failure any more 7b5566ce67 qemu: Re-activate block nodes before storage operations 84ad496494 qemu: block: Introduce helper function to ensure that block nodes are active 648b0ddb13 qemu: monitor: Track inactive state of block nodes in 'qemuBlockNamedNodeData' ac6b351b42 qemuDomainGetStatsCpuProc: Use string constants for CPU stats 0c1a1f9fd4 qemu: Drop reconnectBlockjobs from _qemuDomainObjPrivate struct Signed-off-by: Bruce Ashfield

libvirt: set firewall backend priority

2025-12-02T04:44:16+00:00

If firewall_backend isn't configured in the config file, libvirt will choose the first available backend from the following list by default: [nftables, iptables] so when nftables is installed in image, firewall backend nftables rather than iptables is adopted. Add a PACKAGECONFIG to set the firewall backend priority. And update runtime dependencies for backend nftables. Signed-off-by: Kai Kang Signed-off-by: Bruce Ashfield