linux/meta-virtualization.git/recipes-extended, branch master-next

libvirt: re-add ptest support for meson build system

2026-06-12T18:44:00+00:00

libvirt has switched its build system from Makefile to meson, so the original run-ptest which relied on "make -C tests -k check-TESTS" no longer works. Re-add ptest support based on the meson build system: - Rewrite run-ptest to directly execute the compiled test binaries instead of invoking make. - Patch meson.build at configure time to replace absolute build/source paths with the ptest install paths, removing the need for separate path-stripping patches. - Install test binaries and their required data files into the ptest directory. Test results on genericx86-64: All 120 tests passed (0 failures, 0 skips). root@genericx86-64:/usr/lib/libvirt/ptest# ./run-ptest PASS: chxml2xmltest PASS: nssguestlinktest PASS: virbuftest PASS: viracpitest PASS: esxutilstest PASS: ssh PASS: storagepoolxml2xmltest PASS: commandtest ... ... PASS: nwfilterebiptablestest PASS: cputest === Test Summary === PASS: 120 FAIL: 0 SKIP: 0 TOTAL: 120 Signed-off-by: Haitao Liu Signed-off-by: Bruce Ashfield

libvirt: enable nftables by default

2026-06-12T02:58:55+00:00

The iptables kernel modules (MASQUERADE, etc.) are increasingly unavailable — the broader container ecosystem has moved to nftables (netavark dropped iptables entirely, incus prefers nft). Without nftables enabled, libvirtd's default network fails to start with "Extension MASQUERADE revision 0 not supported, missing kernel module". Add nftables to the default PACKAGECONFIG. This switches the firewall backend priority to nftables,iptables (prefer nft, fall back to iptables) and changes RDEPENDS from iptables to nftables + iproute2-tc. Signed-off-by: Bruce Ashfield

libvirt: disable secrets encryption for embedded environments

2026-06-12T02:58:55+00:00

Libvirt v12 added encrypted secrets storage using systemd-creds. The build-time virt-secret-init-encryption.service generates an encrypted credential via 'systemd-creds encrypt' tied to the build host's TPM or machine key. At runtime in a QEMU VM (or any different machine), the credential cannot be decrypted, causing libvirtd to fail with "Invalid encryption key for the secret" and refuse to start. Set encrypt_data = 0 in secret.conf and remove the stale build-time encrypted key file. Embedded and QEMU-based environments do not have persistent machine credentials needed for this feature. Signed-off-by: Bruce Ashfield

xvisor: update to v0.3.2-tip

2026-06-02T22:54:47+00:00

Bumping xvisor to version v0.3.2-57-g1de3ff44, which comprises the following commits: 1de3ff44 [RISC-V] Fix RVV vlenb probe in cpu_vcpu_rvv_init 8713a802 [RISC-V] Disable MMU before page table cleanup 50facff9 [RISC-V] Fix RVV state and dynamically initialize vector registers 5ec72e10 [RISC-V] Fix RVV context save/restore stride and RV32 compatibility 0558c348 TESTS: compile with -fno-pic and -Wl,--no-pie acea4920 [RISC-V] Replace .word encodings with H-extension mnemonics b4f4753e RISC-V: delegate illegal instruction exception by default defbff33 RISC-V: introduce RVV_ENABLED macro fa393fe8 RISC-V: make dumpreg command sensitive to VLEN 8a12f4dd RISC-V: add support for RVV f9035e95 Fix: Track vcpu after scheduler switch to process correct IRQs e6cf23ef CORE: vmm_main: Check aliases node if stdout-path value is not a path 22a8fe9b TESTS: Use '-std=gnu11' to fix build with GCC 15 9682e7b5 Makefile: Use '-std=gnu11' to fix build with GCC 15 355c79a0 irq-riscv-aclint: fix overlapping irqdomains 37ff69f4 irq-riscv-imsic: fix imsic without handlers 10a76a80 virtio_host_blk: make device ready before using its virtqueues 09328306 RISC-V: Pass -1 in hart_mask_base instead of hart_mask in rfence SBI. 4ac97ff8 RISC-V: Configure Smstateen extension for Guest 57abfd81 RISC-V: Add Smstateen related CSR defines ef0f5b31 RISC-V: Parse Smstateen extension from ISA string 0d3c1047 CORE: vmm_platform: Fix platform_get_msi_domain() implementation 2e0ed848 RISC-V: Implement SBI nested acceleration extension 2f1d7696 RISC-V: Extend nested virtualization for shared memory based HFENCE ad0de2db RISC-V: Extend nested virtualization for shared memory based CSR access 34059f13 RISC-V: Add defines for the SBI nested acceleration extension fb46e69f RISC-V: Remove redundant timer event from struct riscv_priv_nested a8c5e49d RISC-V: Increase the SWTLB size used for nested virtualization 50e27aee RISC-V: Use bitfields in struct arch_pgflags 37b51025 RISC-V: Count the guest page faults redirected to the Guest 6777a28c x86: Fix linker warning seen with binutils 2.39 a99eda34 [DRIVERS] virtio: fix virtio test bit 9b5f55ed DRIVERS: xlnx-uartlite: Add support for Xilinx AXI UART Lite c21af932 fix: correct argument for opensbi dbcn console read ecall 4b27a93d Makefile: Improve dependency files inclusion logic f9e95d05 RISC-V: Add sbss section in linker script abc9b330 COMMANDS: vserial: Yield the CPU time in cmd_vserial_bind() 5403f96d RISC-V: Implement SBI debug console extension for Guest afd3ba37 RISC-V: Fix how guest vserial instance is located b8abc095 RISC-V: Use SBI debug console for defterm whenever available 0dfef2af RISC-V: Add SBI_SPEC_MK_VERSION() helper macro fc818343 RISC-V: Add defines for SBI debug console extension 9f685732 RISC-V: Change the SBI specification version to v2.0 for guest d16db436 RISC-V: Allow disabling SBI extensions based on Guest DT 7ee4bfde RISC-V: Add option probe() callback for VCPU SBI extensions 8763c9ed RISC-V: Rename cpu_vcpu_fp_init() to cpu_vcpu_fp_reset() 08199bd5 RISC-V: Improve timer init and deinit function 9cd344d0 DOCS: Update qemu-system-riscv[64|32] usage in README files abb381cb Makefile: fix grep warning 0c8bbfe3 Makefile: fix grep warning a969f502 RISC-V: Force no-pie code generation and static link f5742761 X86: fix some basic error 3f715f58 RISC-V: Align _start_hang symbol to 4 bytes a705b847 TOOLS: memimg.py: explicitly use the python3 interpreter 888c94e7 TOOLS: d2c.py: explicitly use the python3 interpreter 1329959e TESTS: common: Fix busybox rootfs configuration for virt32 2968af2f DOCS: Update commit tag in v0.3.2 release notes Signed-off-by: Bruce Ashfield

xen-tools: update to RELEASE-4.21.1 -tip

2026-06-02T22:47:19+00:00

Bumping xen-tools to version RELEASE-4.21.1-39-g16e9e6245c, which comprises the following commits: 16e9e6245c tools/libxl: Fix libxl_nocpuid.c build with json-c ed13b64882 CI/ECLAIR: avoid intercepting intermediate linking steps 3db23dfdc6 symbols: explicitly specify source file name for symtab 7372acade2 memory: overlapping XENMAPSPACE_gmfn_range requests fd2ccd79ab x86/time: make do_settime() uses more accurate 3dccad5220 xsm/flask: Fix undefined behaviour in avc_dump_av() 1ae7e08217 EFI: adjust cfg file buffer freeing 9358a206cb xvmalloc: adjust XVFREE() ordering a8e85414e6 x86/svm: Always sync guest CR2 on VMExit 13ca96cdc9 x86/boot: Disable interrupts when establishing SSP 00496ab150 x86/cpuidle: split the max_cstate variable 032d39ff0e x86/cpu: identify uninitialized CPU data using BAD_APICID 8af05b4917 x86/amd: Mitigate AMD-SN-7052 0d8b25d1fc gnttab: split gnttab_map_frame() 43e32ae4f9 tools/xenstored: make conn_delete_all_transactions() idempotent f732e91aa8 tools/oxenstored: Reset quota when resetting permissions 17a7843054 x86/mkelf32: Actually pad load segment to 2 MiB boundary 54db249531 xen/cpu: round cpu_khz calculations 27748a7343 x86/time: use native TSC scaling factors when TSC is not scaled 2d1a11a50d x86/HPET: channel handling in hpet_broadcast_resume() 76b359a878 x86/APIC: handle overflow in TMICT calculation 9c79644d35 x86/time: do not kill calibration timer on suspend 6b8be120c8 xen/uart: set a default baudrate if non specified neither found b2352be941 xen/x86: Check supported features even for PVH dom0 8f3dcdcf9f video/vesa: harden font height parsing afb919ff6a ns16550: harden positional parsing f35f0ac0c8 ns16550: harden name/value pair parsing c9ba169b93 llc-coloring: improve checking while parsing feb99494bf EFI: avoid OOB config file reads e2981e073f x86/fpu: Initialise FTW in xstate_alloc_save_area() 761aba980a xen/uart: be more careful with changes to the PCI command register a011ca9e08 xen/uart: uniformly set ->ps_bdf_enable for all PCI serial devices 8482a1ce08 libacpi: Pass missing --dm_version to mk_dsdt b3c4a20a15 xen/uart: report an error if the device type is not supported aaa03d41be arinc653: remove idle period in default schedule 646bcc17ce arinc653: avoid array overrun d174a86aaf arinc653: overwrite entire .dom_handle[] for Dom0 slots fa82d4f5cc update Xen version to 4.21.2-pre 90b20547b7 x86/amd: Mitigate AMD-SN-7053 / FP-DSS Signed-off-by: Bruce Ashfield

xen: update to RELEASE-4.21.1 -tip

2026-06-02T22:47:19+00:00

Bumping xen to version RELEASE-4.21.1-39-g16e9e6245c, which comprises the following commits: 16e9e6245c tools/libxl: Fix libxl_nocpuid.c build with json-c ed13b64882 CI/ECLAIR: avoid intercepting intermediate linking steps 3db23dfdc6 symbols: explicitly specify source file name for symtab 7372acade2 memory: overlapping XENMAPSPACE_gmfn_range requests fd2ccd79ab x86/time: make do_settime() uses more accurate 3dccad5220 xsm/flask: Fix undefined behaviour in avc_dump_av() 1ae7e08217 EFI: adjust cfg file buffer freeing 9358a206cb xvmalloc: adjust XVFREE() ordering a8e85414e6 x86/svm: Always sync guest CR2 on VMExit 13ca96cdc9 x86/boot: Disable interrupts when establishing SSP 00496ab150 x86/cpuidle: split the max_cstate variable 032d39ff0e x86/cpu: identify uninitialized CPU data using BAD_APICID 8af05b4917 x86/amd: Mitigate AMD-SN-7052 0d8b25d1fc gnttab: split gnttab_map_frame() 43e32ae4f9 tools/xenstored: make conn_delete_all_transactions() idempotent f732e91aa8 tools/oxenstored: Reset quota when resetting permissions 17a7843054 x86/mkelf32: Actually pad load segment to 2 MiB boundary 54db249531 xen/cpu: round cpu_khz calculations 27748a7343 x86/time: use native TSC scaling factors when TSC is not scaled 2d1a11a50d x86/HPET: channel handling in hpet_broadcast_resume() 76b359a878 x86/APIC: handle overflow in TMICT calculation 9c79644d35 x86/time: do not kill calibration timer on suspend 6b8be120c8 xen/uart: set a default baudrate if non specified neither found b2352be941 xen/x86: Check supported features even for PVH dom0 8f3dcdcf9f video/vesa: harden font height parsing afb919ff6a ns16550: harden positional parsing f35f0ac0c8 ns16550: harden name/value pair parsing c9ba169b93 llc-coloring: improve checking while parsing feb99494bf EFI: avoid OOB config file reads e2981e073f x86/fpu: Initialise FTW in xstate_alloc_save_area() 761aba980a xen/uart: be more careful with changes to the PCI command register a011ca9e08 xen/uart: uniformly set ->ps_bdf_enable for all PCI serial devices 8482a1ce08 libacpi: Pass missing --dm_version to mk_dsdt b3c4a20a15 xen/uart: report an error if the device type is not supported aaa03d41be arinc653: remove idle period in default schedule 646bcc17ce arinc653: avoid array overrun d174a86aaf arinc653: overwrite entire .dom_handle[] for Dom0 slots fa82d4f5cc update Xen version to 4.21.2-pre 90b20547b7 x86/amd: Mitigate AMD-SN-7053 / FP-DSS Signed-off-by: Bruce Ashfield

virt-manager: update to v5.1.0-tip

2026-06-02T21:06:03+00:00

Bumping virt-manager to version v5.1.0-94-g213b015b2, which comprises the following commits: 213b015b2 Translated using Weblate (Estonian) a4c03a822 Translated using Weblate (Serbian) da38bc58b Translated using Weblate (Persian) 0d2b47f14 Translated using Weblate (Chinese (Simplified Han script)) e17091b6d ci: bump codecov/codecov-action from 5 to 6 2450354f3 man: virt-install: add inst prefix to kickstart installer arguments 3fc7a2fa8 Translated using Weblate (Chinese (Traditional) (zh_TW)) c9f9f165d Translated using Weblate (Chinese (Simplified) (zh_CN)) 947a5a2aa Translated using Weblate (French) b4e57abb5 Update translation files a2052e959 Added translation using Weblate (Chinese (Simplified Han script)) ef9f5cc90 Translated using Weblate (Estonian) fad29e937 serialcon: add 'nmdm' console support b2b32ccc7 tests: properly skip win11 aarch64 test on old osinfo 19f18e9f5 cli: add --boot firmware.enrolled-keys=,firmware.secure-boot= e5c731787 domain: os: add set_firmware_feature helper 08ec19204 man: virt-install: remove some obscure --boot scearios 3eebb61b7 man: virt-install: change `--boot secure-boot=` docs 09ecf1cfd ci: Install `acl` to get more code coverage 48c9076d5 ci: add `workflow_dispatch` to more workflows 91f506f06 testdriver: add more complete zfs XML 2c87e485e uitests: createvm: add Customize->Add Hardware->TPM case 20d375a04 details: Fix TPM label from `Customize` wizard 23d6f9088 tests: cli: fix aarch64-win11 with latest osinfo-db d306fb6b2 uitests: Add coverage exclusions 198778dfb uitests: cover NVME disks and controller 98921c4dc uitests: cover USB startup policy 9681c3d43 ui: add USB startup policy mnemonics b3daef7ef testmock: add --test-options=disable-name-validation ba532d3ed uitests: relax alert lookup naming eba62e983 uitests: fix snapshot name validation test 5d7c66378 man: secure-boot: don't mention entrolled-keys 23dd48ae9 cli: add --boot secure-boot option 9ab2918fa virtinst: add support for iommufd d13271422 virtinst: fix locale when running in flatpak 90e425b59 ui: Show NVMe Controller details 08b547366 virtManager: Add NVMe disk type 97505a9fe virtinst: implement NVMe disk target generation 605b3d807 virtinst: Add NVMe Controller 6f1adcc92 virtinst: Add serial controller option to cli 206e79d50 tests: use Node.path when available 711275b92 tests: handle "collection_path" and "path" for pytest_ignore_collect() a5a540369 tests: port pytest_ignore_collect() to pathlib 10014e150 addhardware: Add usb as a recommended sound device 606633249 Translated using Weblate (Swedish) 04ab5617a Translated using Weblate (Indonesian) 7fd958770 Translated using Weblate (Estonian) 9a9267470 Translated using Weblate (Turkish) 2af8e00c8 Translated using Weblate (Romanian) ff0e401ee Translated using Weblate (Chinese (Simplified) (zh_CN)) fe5e1ea17 Translated using Weblate (Portuguese (Brazil)) a91f48faa Translated using Weblate (Portuguese) 0fbc02c6e Translated using Weblate (English (United Kingdom)) 0881c9c64 Translated using Weblate (Italian) 4afe2b71e Translated using Weblate (Turkish) 74d5b0f9e Translated using Weblate (Chinese (Simplified) (zh_CN)) cc2bb397e Translated using Weblate (Chinese (Simplified) (zh_CN)) 39791b73c Translated using Weblate (Kabyle) e9bf0bc12 Translated using Weblate (Chinese (Simplified) (zh_CN)) 984d20203 Translated using Weblate (Finnish) d150bab3f Translated using Weblate (German) 43f4c7859 Translated using Weblate (Polish) 7c2bebaee Translated using Weblate (Russian) f5b56cdec Translated using Weblate (Korean) 904f95291 Translated using Weblate (Swedish) bc9e5dc15 Translated using Weblate (Spanish) 015fb0b7f Translated using Weblate (Georgian) 3a66f48e2 Translated using Weblate (Ukrainian) a5553cb91 Translated using Weblate (Romanian) 87298b9c9 Translated using Weblate (Czech) 35ad9057f virtinst: Fix XDG_DATA_HOME handling 488389ced ci: Add gobject-introspection dep e1613dba5 ci: Fix test-against-libvirt-git a2baaf789 installer: add support to use device boot order 3985b0746 virtinst: remove legacy attribute from set_boot_order/get_boot_order 3a25792d9 virtinst: guest: introduce can_use_device_boot_order 25670b2ee virtinst: rework get_boot_order 161fb1baa maint: use constants instead of strings for boot devices e438a7724 ci: bump actions/checkout from 5 to 6 411f019f8 virtinst: add support for pcihole64 53df7b496 virtinst: add support for acpi-generic-initiator d57e2e738 virtinst: interface: add support for backend.hostname and backend.fqdn 57e6f96f9 virtManager: wrapped details hw-panel with GtkScrolledWindow f9a01fbf9 metainfo: Add developer tag 9e9252982 Rename AppStream metadata to rDNS format f907ede75 Calling loader.close() before pixbuf assignment to avoid NoneType pixbuf 6fe47feca Fix typo in virt-clone documentation 766bf2ecd xmlapi: add xmletree.py backend d0372e82c xmllibxml2: lazily import libxml2 ff9fa95e5 xmlbase: fix parentnode None check d4988b02e xmlapi: split out xmlbase.py and xmllibxml2.py ea71cf9a8 virtinst: cloudinit: include empty meta-data file ecd280d59 addhardware: network: adjust supported network devices for bhyve a2c00ee84 ci: bump actions/setup-python from 5 to 6 Signed-off-by: Bruce Ashfield

virtiofsd: update to v1.13.3

2026-06-02T20:36:49+00:00

Single patch-level bump on the 1.13.x line. New crate sha256sum from the crates.io API: 162e60c45fbfeaf1d3f8407d788d4b5a0a718f49f469ccd3c7140480716d7677 virtiofsd-crates.inc regenerated via `bitbake virtiofsd -c update_crates`; only 4 lines of diff in the pinned crate list, consistent with a patch release. Signed-off-by: Bruce Ashfield

vhost-device-vsock: update to v0.3.0

2026-06-02T20:21:29+00:00

Bump 0.1.0 -> 0.3.0 (the two newer crate publications: 0.2.0 then 0.3.0). The other four vhost-device-* recipes (gpio, i2c, rng, scsi) stay at 0.1.0 since that remains the only version published on crates.io for each of them. New crate sha256sum (from the crates.io API): 52ce95d81af89ad693d067c650e42df0f217addfbc96cc4820f7c62eb4a28b13 vhost-device-vsock-crates.inc regenerated via `bitbake vhost-device-vsock -c update_crates`; the new Cargo.lock pulled in a substantial refresh of the transitive dependency graph (200 insertions, 244 deletions in the pinned list). Signed-off-by: Bruce Ashfield

upx: update to v5.1.1-tip

2026-06-02T20:00:40+00:00

Bumping upx to version v5.1.1-64-g93abc161, which comprises the following commits: 93abc161 CI updates f1671f80 CI updates 86f16465 CP/M-86: size header data group to buffer size 07570d35 Add support for CP/M-86 CMD 3d5101c6 PE: stub should not clear tlsindex for .dll cd56a4a5 CI updates 70ae43e9 pefile: align imagesize after removing .reloc section b7472198 CI updates eab70229 pefile: align imagesize after removing .reloc section f52b206f CI updates d7bd3d9a JNI_OnLoad only if CMD_COMPRESS 2dd6e381 CI updates ceb8a395 CI updates 2f9be3bd CI updates 8fa669f2 CI updates 5ef29bb4 CI updates 06334a4d CI updates b1a6b710 CI updates 2d302628 CI updates 8cee4522 riscv64: preserve e_flags to prevent CantUnpack d6f2f877 CI updates fab1117a CI updates 965cb22e CI updates 15ed0285 CI updates 136bf9a2 CI updates 77c942d0 CI updates ac5336f2 CI updates 7e1fab76 CI updates 21874327 CI updates fa5877ff CI updates f9138c1b CI updates 0aea9492 CI updates f0a89504 pefile: really remove .reloc section if no relocs 7850dfe3 CI updates 9e06ba7a CI updates ab05f314 pefile: really remove .reloc section if no relocs c0cfe9f9 pefile: diagnose bad Import e0abaa5e CI updates ffc0e622 CI updates 924283a1 CI updates df8b76f0 Catch more fuzz when unpacking ELF symbol table 7fe3b646 CI updates 0e875f54 CI updates ee8facd3 CI updates 0cd70a32 CI updates 37b33373 CI updates aeb1caf8 CI updates 9e3dcdc9 CI updates db5de3d0 CI updates 7f2d1e5c CI updates 7e78bbdf CI updates 50f3a42c CI updates dcfbf325 CI updates 64dab898 CI updates 3821b557 CI updates 20f608ce CI updates 30fee81f pefile de-compress: fix bug when no relocs 2a6fdf7c submodules: update for new versions f6a210ec CI updates 6cc54699 test-clibs: submodules 6a6b6fb5 pack ELF64: fix PLT section name for SHT_RELA in pack3 5e394635 unpack Elf: check relocation of DT_INIT_ARRAY bfd92757 unpack ELF: check xct_off or yct_off 36babe77 all: post-release version bump Signed-off-by: Bruce Ashfield