summaryrefslogtreecommitdiffstats
path: root/recipes-extended
Commit message (Collapse)AuthorAgeFilesLines
* libvirt: disable netcf backend by defaultMarkus Volk2026-03-301-1/+1
| | | | | | | | | | | | | | I see a failure in netcf: | ./bootstrap: .gnulib/gnulib-tool --import --no-changelog --aux-dir build-aux --doc-base doc --lib libgnu --m4-base gnulib/m4/ --source-base gnulib/lib/ --tests-base gnulib/tests --local-dir gl --lgpl=2 --with-tests --makefile-name=gnulib.mk --libtool --import ... | python3: can't open file '/home/flk/bitbake-builds/poky/build/tmp/work/corei7-64-oe-linux/netcf/0.2.8+git/sources/netcf-0.2.8+git/.gnulib/.gnulib-tool.py': [Errno 2] No such file or directory | ./bootstrap: gnulib-tool failed Since the code hasn't been updated in over seven years, and after reading this discussion, perhaps the best solution would be to disable netcf support by default? https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/message/755CCFUFUW6OTN7CAHB77H7YXQNE5WGG/ Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph, libvirt, openvswitch: marked some CVEs as patchedYouenn Le Jeune2026-03-302-0/+10
| | | | | | | | | | | | For ceph, libvirt and openvswitch, 9 CVEs were marked as "unpatched" whereas they have been patched long ago compared to the versions of the recipes, because the NVD database does not contain patched version for those CVEs. Reviewed-by: Enguerrand de Ribaucourt <enguerrand.de-ribaucourt@savoirfairelinux.com> Reviewed-by: Erwann Roussy <erwann.roussy@savoirfairelinux.com> Signed-off-by: Youenn Le Jeune <youenn.lejeune@savoirfairelinux.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* seabios: update to 1.17.0Bruce Ashfield2026-03-262-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update SeaBIOS from 1.16.0 to 1.17.0. Refresh python3.patch for shifted context. Shortlog of changes since 1.16.0: - ahci: Fix hangs due to controller reset - ahci: add controller reset - ahci: Power ON + ICC_ACTIVE into port setup code - Add LBA 64bit support for reads beyond 2TB - detect physical address space size - move 64bit pci window to end of address space - limit address space used for pci devices - pciinit: don't misalign large BARs - update pci_pad_mem64 handling - fix smbios blob length overflow - check for e820 conflict - usb-hid: Support multiple USB HID devices via linked list - boot: Force display of boot menu when boot-menu-wait is negative - esp-scsi: indicate acceptance of MESSAGE IN phase data - esp-scsi: terminate DMA transfer when ESP data transfer completes - vbe: implement function 09h (get/set palette data) - vbe: Add VBE 2.0+ OemData field - vgabios: Fix generating modes list for static_functionality - Various stdvga/vgasrc naming and interface cleanups - kconfig: fix check-lxdialog.sh to work with gcc 14+ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-what: update to 1.27Bruce Ashfield2026-03-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Update from 1.21 to 1.27. Notable changes across versions: - Add detection for Alibaba Cloud (ARM and x86) - Add detection for AWS (baremetal, KVM, Xen) - Add detection for Google Cloud - Add detection for Nutanix AHV - Add detection for UpCloud - Add detection for OCI (Oracle Cloud Infrastructure) - Add detection for bhyve, VMM (OpenBSD) - Add detection for illumos lx-branded zones - Add detection for Xen on ARM - Add detection for ESX on ARM - Add detection for Hyper-V on ARM - Add detection for CRI-O and Podman containers - Add detection for LDOM (Oracle/Sun) - Add detection for z/VM (IBM) - Improved QEMU/KVM detection via SMBIOS - Support for --root-dir option for offline analysis - Various bug fixes and test suite improvements Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-viewer: update to v11.0-tipBruce Ashfield2026-03-251-1/+4
| | | | | | | | | | | | | | | | | | | | | Bumping virt-viewer to version v11.0-100-ge07dbc9, which comprises the following commits: e07dbc9 remote-viewer: Simplify oVirt username setting 16dab63 remote-viewer: Update govirt requirement 6557319 ovirt: Remove unused declaration ovirt_foreign_menu_get_gtk_menu 093212d Hide the header bar in full-screen mode. 9f3b839 Don't schedule unreveal timer if not active 6fcd5f4 feat: fix kiosk mode previous toolbar grab mouse cursor 17d8b9f Translated using Weblate (Russian) bbba3d3 rpm: disable -Werror on Fedora / ELN c596813 Translated using Weblate (Japanese) 29e7778 Translated using Weblate (Spanish) a5ce69d Translated using Weblate (Chinese (Traditional) (zh_TW)) cd9b430 Translated using Weblate (Telugu) f4bc61e Add Ctrl+Alt+Shift+Esc key command for logind's SecureAttentionKey 107f60c data: Add x-scheme-handler/vnc to desktop file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update to v5.1.0-tipBruce Ashfield2026-03-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping virt-manager to version v5.1.0-81-gb2b32ccc7, which comprises the following commits: b2b32ccc7 tests: properly skip win11 aarch64 test on old osinfo 19f18e9f5 cli: add --boot firmware.enrolled-keys=,firmware.secure-boot= e5c731787 domain: os: add set_firmware_feature helper 08ec19204 man: virt-install: remove some obscure --boot scearios 3eebb61b7 man: virt-install: change `--boot secure-boot=` docs 09ecf1cfd ci: Install `acl` to get more code coverage 48c9076d5 ci: add `workflow_dispatch` to more workflows 91f506f06 testdriver: add more complete zfs XML 2c87e485e uitests: createvm: add Customize->Add Hardware->TPM case 20d375a04 details: Fix TPM label from `Customize` wizard 23d6f9088 tests: cli: fix aarch64-win11 with latest osinfo-db d306fb6b2 uitests: Add coverage exclusions 198778dfb uitests: cover NVME disks and controller 98921c4dc uitests: cover USB startup policy 9681c3d43 ui: add USB startup policy mnemonics b3daef7ef testmock: add --test-options=disable-name-validation ba532d3ed uitests: relax alert lookup naming eba62e983 uitests: fix snapshot name validation test 5d7c66378 man: secure-boot: don't mention entrolled-keys 23dd48ae9 cli: add --boot secure-boot option 9ab2918fa virtinst: add support for iommufd d13271422 virtinst: fix locale when running in flatpak 90e425b59 ui: Show NVMe Controller details 08b547366 virtManager: Add NVMe disk type 97505a9fe virtinst: implement NVMe disk target generation 605b3d807 virtinst: Add NVMe Controller 6f1adcc92 virtinst: Add serial controller option to cli 206e79d50 tests: use Node.path when available 711275b92 tests: handle "collection_path" and "path" for pytest_ignore_collect() a5a540369 tests: port pytest_ignore_collect() to pathlib 10014e150 addhardware: Add usb as a recommended sound device 606633249 Translated using Weblate (Swedish) 04ab5617a Translated using Weblate (Indonesian) 7fd958770 Translated using Weblate (Estonian) 9a9267470 Translated using Weblate (Turkish) 2af8e00c8 Translated using Weblate (Romanian) ff0e401ee Translated using Weblate (Chinese (Simplified) (zh_CN)) fe5e1ea17 Translated using Weblate (Portuguese (Brazil)) a91f48faa Translated using Weblate (Portuguese) 0fbc02c6e Translated using Weblate (English (United Kingdom)) 0881c9c64 Translated using Weblate (Italian) 4afe2b71e Translated using Weblate (Turkish) 74d5b0f9e Translated using Weblate (Chinese (Simplified) (zh_CN)) cc2bb397e Translated using Weblate (Chinese (Simplified) (zh_CN)) 39791b73c Translated using Weblate (Kabyle) e9bf0bc12 Translated using Weblate (Chinese (Simplified) (zh_CN)) 984d20203 Translated using Weblate (Finnish) d150bab3f Translated using Weblate (German) 43f4c7859 Translated using Weblate (Polish) 7c2bebaee Translated using Weblate (Russian) f5b56cdec Translated using Weblate (Korean) 904f95291 Translated using Weblate (Swedish) bc9e5dc15 Translated using Weblate (Spanish) 015fb0b7f Translated using Weblate (Georgian) 3a66f48e2 Translated using Weblate (Ukrainian) a5553cb91 Translated using Weblate (Romanian) 87298b9c9 Translated using Weblate (Czech) 35ad9057f virtinst: Fix XDG_DATA_HOME handling Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* rootlesskit: update to v3.0.0-alpha.2Bruce Ashfield2026-03-256-606/+526
| | | | | | | | | | | | | | | | | | | Bumping rootlesskit to version v3.0.0-alpha.2-2-ga313ce8, which comprises the following commits: 3135d58 v3.0.0-alpha.2+dev 48a2131 v3.0.0-alpha.2 cc21afb Build(deps): Bump golang.org/x/sys from 0.39.0 to 0.40.0 0c54ba3 Build(deps): Bump github.com/containers/gvisor-tap-vsock c62a145 fix(testsuite):fix flaky by ensure port is free to use bac9c12 Build(deps): Bump golang.org/x/sys from 0.38.0 to 0.39.0 e814ea0 Build(deps): Bump github.com/containernetworking/plugins d95fa30 Build(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0 45ea529 Build(deps): Bump actions/setup-go from 5 to 6 8b0d41e Build(deps): Bump actions/checkout from 5 to 6 64d4cd5 v3.0.0-alpha.1+dev 7ae0e6b v3.0.0-alpha.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oath: update to 2.6.14Bruce Ashfield2026-03-243-57/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update oath-toolkit from 2.6.2 to 2.6.14. Drop patches and workarounds that are no longer needed: - 0001-oath-fix-macro-definition-error.patch (file removed upstream) - EXTRA_AUTORECONF m4 workaround (AM_PATH_XML2 dropped in 2.6.7) - Stale md5sum checksum Upstream changes since 2.6.2: 2.6.14 (2026-01-27): - pam_oath: Support null_usersfile_okay parameter - Build fixes for glibc 2.43 2.6.13 (2025-07-29): - liboath/libpskc: Fix _FORTIFY_SOURCE build problem - liboath: Fix --with-openssl builds - Git hosting moved from gitlab.com to codeberg.org 2.6.12 (2024-10-03): - pam_oath: Drop privs for usersfile with ${HOME} (CVE-2024-47191) - liboath: Don't follow symbolic links for usersfile updates (CVE-2024-47191) - oathtool: Fix test suite on 32-bit big-endian platforms - libpskc: Fix linker warning with mold, musl implicit declaration 2.6.11 (2024-01-11): - liboath: Handle invalid base32 encoded secrets 2.6.10 (2024-01-03): - Build fixes for Windows and Arch Linux 2.6.9 (2023-07-09): - Improve compatibility with recent libxmlsec 2.6.8 (2023-07-09): - libpskc: Fixes for recent libxmlsec releases - pam_oath: Provide fallback pam_modutil_getpwnam implementation - liboath: Builds on Windows 2.6.7 (2021-05-01): - pam_oath: Support variables in usersfile string parameter - build: Drop AM_PATH_XML2 in favor of pkg-config 2.6.6 (2021-01-20): - oathtool: Handle HOTP --counter values > 0x7FFFFFFFFFFFFFFF 2.6.5 (2020-12-29): - oathtool: Support reading KEY and OTP from stdin or filename 2.6.4 (2020-11-11): - Fix libpskc memory corruption bug - pam_oath: Fail gracefully for missing users 2.6.3 (2020-11-07): - oathtool: Support TOTP with hash SHA512 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvmi: update v0.14.0-tipBruce Ashfield2026-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | We add gettext as a dependency to fix: ERROR: libvmi-0.14.0+git-r0 do_configure: QA Issue: AM_GNU_GETTEXT used but no inherit gettext [configure-gettext] ERROR: libvmi-0.14.0+git-r0 do_configure: Fatal QA errors were found, failing task. ERROR: Logfile of failure stored in: tmp/work/x86-64-v3-poky-linux/libvmi/0.14.0+git/temp/log.do_configure.3722649 ERROR: Task (recipes-extended/libvmi/libvmi_git.bb:do_configure) failed with exit code '1' NOTE: Tasks Summary: Attempted 3936 tasks of which 3928 didn't need to be rerun and 1 failed. Bumping libvmi to version v0.10-1148-g82bbee6, which comprises the following commits: 82bbee6 Fix pointer mismatches, which GCC complains about (#1120) 77a677a Add vmi_map_guest_pfns() function (#1118) b196d72 Remove old debian from ci (#1119) 872ccc6 Fix NtBuildNumber read (#1114) f02aeb7 implement Windows PTE resolving (#1074) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: update to v12.1.0 -tipBruce Ashfield2026-03-243-35/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We update our python checksum and drop a patch that is no longer needed. Bumping libvirt to version v12.1.0-107-g9fa6beff05, which comprises the following commits: 9fa6beff05 qemuxmlconftest: Update 's390x' tests using 'virt-4.2' machine type 4537c0b870 qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM 59fde80f39 qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM 623844bf2a virsh: migrate: Add support for VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO f5fc45efea qemu: migration: Introduce 'VIR_MIGRATE_PARAM_MIGRATE_DISKS_TARGET_ZERO' 6670924a0d virsh: Add support for 'VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED' as '--dest-is-zero' aa7d3142aa qemu: Add VIR_DOMAIN_BLOCK_COPY_TARGET_ZEROED flag for virDomainBlockCopy b7e51e875a qemu: monitor: Add support for 'target-is-zero' option of 'blockdev-mirror' aba64fc539 qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_MIRROR_TARGET_IS_ZERO f7ae47274a qemuMigrationSrcPerformTunnel: Remove 'migrate_disks' argument 7abfcef53c qemuTranslateSnapshotDiskSourcePool: Use proper error code d9e2db9445 qemu: conf: Don't use VIR_ERR_INTERNAL_ERROR for config file parsing errors 42ef9a200a qemu: backup: Move setup of VIR_STORAGE_NET_HOST_TRANS_FD to qemuBackupPrepare 231ae15e97 qemuxmlconftest: Add missing test for <readonly> attribute of p9-fs devices 20ecc25b91 qemuBuildFSStr: Properly format 'readonly' attribute 2b03d26471 qemuBuildFSStr: Drop code for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE b05fc0eabf qemu: capabilities: Don't advertise support for VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE df3f46c28c qemu: validate: Reject configs with VIR_DOMAIN_FS_DRIVER_TYPE_HANDLE 954036635a scripts: dtrace2systemtap: Fix argument name extraction regex to avoid '*' in names 95d29b66b4 hyperv: Remove unnecessary hash table size query. 85fdb72ac0 hyperv: use constants for xml namespaces a561883abf qemu: add automatic port allocation for pull-mode backup NBD servers 36cf50f85b qemu: driver: Setup 'virPortAllocator' for backup NBD server ports d1c6f0edc1 qemu: conf: add setup for automatic port allocation for pull-mode backup NBD servers 406b7fb0bd tests: Add iommufd fdgroup test 0a83b28795 qemu: Implement iommufd fdgroup 58875a6df6 conf: Add iommufd fdgroup support fc516031ed qemu: Implement iommufd c03b8f0804 conf: Introduce domain iommufd element c1d38e9428 src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD d1fb5cf127 qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD c89b2bf1a8 qemu: Expand call to qemuDomainNeedsVFIO ffa8020d36 hypervisor: Fix virHostdevNeedsVFIO detection d0afa0a842 conf: Refactor virHostdevIsPCIDevice f89e3dbce8 conf: Move and rename virStorageSourceFDTuple object 1a528a4d29 network: Don't enable ip_forward for VIR_NETWORK_FORWARD_OPEN 70b3053057 qemuhotplug: Introduce interface-network-hostdev 685f359eaf qemuhotplugtest: Use fake drivers 605112c584 virnetworkportxml2xmldata: Use different PCI address in plug-hostdev-pci.xml b01baffbb2 qemuxmlconftest: Separate fake drivers into a separate file 6d6da1cbac tests: Drop WITH_QEMU from qemu specific tests binaries/libraries cd6a1ba222 networkxmlconftest: s/fail/cleanup/ d9b34ad12b network: Format <ip/> element using virXMLFormatElement() 05cdfcf568 src: Drop NULL check before calling virBufferEscapeString() 54f5032e57 hyperv: Implement virDomainSnapshotGetParent() 1a5f2ad4c8 hyperv: Implement virDomainSnapshotCurrent()/virDomainHasCurrentSnapshot() 09c0b24424 hyperv: implement virDomainSnapshotGetXMLDesc() 00ccf5b2a8 hyperv: implement virDomainListAllSnapshots()/virDomainSnapshotNum() 6abb988fd1 hyperv: Implement domainSnapshotLookupByName() 293bb59e75 viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged 1fd9f5a3db qemu: Enable AMD IOMMU XTSUP by default e1b8853e48 conf: support >255 vcpu w/ amd-iommu xtsup d47de9e8b9 conf: fix error log for passthrough and xtsup attributes 2842d89706 conf: fix virDomainIOMMUDefEquals for amd_iommu 2e25854933 util: implement virHostCPUGetOnlineBitmap() for FreeBSD 88b5e33b4e rpc: free saved close error in virNetClientDispose e25b82c5f8 tests: Create fake root dirs later 0b54c9d535 docs: Clarify host-model description in domain capabilities 57e5bb55ce virsh: Add --expand-cpu-features option for domcapabilities 3215fee349 qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES 8aa13d1b16 Introduce EXPAND_CPU_FEATURES flag for domain capabilities f552faab53 docs: storage: Note that refreshing the storage pool is needed on outside modification 1ee7d7147b util: Move 'virProcessLimitResourceToLabel' into same preprocessor if-block as only caller 97f3fcd294 qemu: monitor: Use 'flat' mode of 'query-block' 3ae6de95f2 qemu: capabilities: Introduce QEMU_CAPS_QUERY_BLOCK_FLAT e7d959a87f qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-2062-g084a6c6e73"aarch 75edc7ae98 qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-2062-g084a6c6e73" 837463f83f qemu: processShutdownCompletedEvent: Remove inactive VM object after shutdown 89d2948a16 qemu: hotplug: Don't access disk definititon after it was freed after media change bed561c07a qemuDomainAttachDeviceDiskLive: Remove 'disk' variable 25662b3700 qemu_hotplug: Fix crash when attaching network inteface with hostdev network 2f25afba55 util: extend virHostCPUGetInfo() for FreeBSD 4cb677df95 docs: bhyve: add arm64 guest example 9c304e5cc6 docs: bhyve: fix typo in version number d760c5c12e docs: bhyve: document NUMA domains configuration 3f3cb3ab51 hyperv: report whether guests have TPM enabled 83621dcb33 qemuhotplugtest: Run "interface-hostdev" test cases only on Linux f9bb819fc4 qemuhotplugtest: Introduce interface-hostdev test case 662b1f4eb3 virnetdevmock: Mock virNetDevSaveNetConfig() and virNetDevSetNetConfig() e9798b8397 virpcimock: Create net/ subdir for devices 542230251b virpcimock: Create sriov_totalvfs file and virtfnN symlinks d8c70c8988 tests: stop mocking virGetUserRuntimeDirectory() 79d97d2b4f tests: point $HOME and $XDG_* into usable fake root directory f83c0a5e6e consistently use glib g_getenv() instead of libc getenv() 52806b89d6 util: make completely separate functions for WIN32 versions of virGetUser*Directory() 5b1c8c8b86 util: rename virGetUserDirectory(ByUID) to virGetUserHomeDirectory(ByUID) 2dd4298339 remote: reduce scope of userdir in remoteGetUNIXSocketHelper() 86a68ee852 util: reduce scope of rundir in virPidFileConstructPath() 65cd851e57 util: reduce scope/autofree-ify rundir in virDaemonUnixSocketPaths() 331d9fe3ba qemu: support setting default route for passt interfaces inside the guest acd8e9595f conf/util: fix non-specification of IP route destination address 21c8588683 util: make the route arg to virNetDevIPRouteGetPrefix const 1468f995e7 qemu: only limit IPv4 prefix for slirp 4b5c555e97 qemu: reorganize qemuValidateDomainDeviceDefNetwork() 0ae2dde5a8 qemu: delete passt "repair" socket when appropriate 3ea1550c64 test: Default to ROM type for loader 82b09f105a bhyve: support NUMA configuration for domains e4b0fdb72f hyperv: implement virDomainDefineXMLFlags() e62e777d3f hyperv: fix flags passed to virDomainDefParseString() 7aed06b055 hyperv: ensure we don't define multiple domains with the same name bf27594575 hyperv: improve error message when redefining domain fa016baf0a util: json: fix memory leak in virJSONValueFromJsonC() d7b3be8ca3 secret: install service file only if init_script is 'systemd' 03f2672ab4 qemu: Fix IOMMUFD and VFIO security labels b7483e6558 security: Cleanup hostdev label error logic 75f698c77f security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel d704458b31 Post-release version bump to 12.2.0 6f0df1af01 Release of libvirt-12.1.0 496cccf47f news: Mention latency histogram support and (managed) save fixes 4a0424e2f3 Translated using Weblate (English (United Kingdom)) 39b3b2eb37 fdstream: fix EOF handling when reading data 774241017a fdstream: don't set return value if looping to read more data 656f51dd20 news: document bhyve changes for 12.1.0 b0e57a2b35 NEWS: Document features/improvements/bug fixes I've participated in 2c6fe784ac news: document new hyperv features 4374dbbbf0 qemu_hotplug: enter monitor in order to rollback passed FD fe782ed334 domain_conf: initialize network hostdev private data 10d5a41231 util: fix use-after-free in virIdentityGetSystem 633ac90d2b vmx: log full .vmx content 3d1e6d92de qemu: Fix job handling when domain dies in post-copy migration 634b40ccab po: Refresh potfile for v12.1.0 dbf3d81d24 Translated using Weblate (Chinese (Simplified) (zh_CN)) 82512796fe Translated using Weblate (Spanish) e943aff795 Translated using Weblate (Spanish) 8a1bd82f50 Translated using Weblate (Spanish) 29a53e39c0 Translated using Weblate (Czech) 92cbb0fcd7 Translated using Weblate (Greek) f88910b713 Translated using Weblate (Romanian) e39ce22996 Translated using Weblate (Greek) b713afcebd Translated using Weblate (Greek) 42eb8b6d0b Translated using Weblate (Swedish) ce5e429171 Translated using Weblate (Swedish) d507c85f93 Update translation files aa48051095 Added translation using Weblate (Chinese (Traditional Han script)) 5b6adb61c8 Translated using Weblate (Georgian) 6085f809ad bhyve: Default to ROM type for loader f051939111 news: Document support for uefi-vars device and firmwares 0151db88c2 virsh: Update for varstore handling 31e40b6229 include: Mention varstore where applicable bcda5b2efd qemu_command: Use uefi-vars device where appropriate 0ea04024ef tests: Add firmware descriptors for uefi-vars builds bcbb2667e2 security: Handle varstore file a32b4a6037 security: Mark ROMs as read only when using AppArmor 5dc97de2c4 qemu: Create and delete varstore file 41fe1199bb qemu: Introduce qemuPrepareNVRAMFileCommon() 0dd118ccee qemu_firmware: Generate varstore path when necessary df3121d21e qemu: Introduce varstoreDir da7eb72148 qemu_firmware: Fill in varstore information fa74aae490 qemu_firmware: Allow matching stateful ROMs ffe37c6989 qemu_firmware: Use of NVRAM implies stateful firmware 500c010df2 qemu: Fill in varstore element in domcaps 3d6987914b conf: Include varstore element in domcaps a440ada214 qemu_firmware: Report NVRAM template path for ROMs cab5b6532d qemu_firmware: Support extended syntax for ROM firmware descriptors d0c6aa084f qemu_firmware: Consider host-uefi-vars feature in sanity check 91337ee06d qemu_firmware: Split sanity check 83679d7338 qemu_firmware: Parse host-uefi-vars firmware feature 38c4c3f654 tests: Add firmware-auto-efi-enrolled-keys-aarch64 0653a2eae2 tests: Add firmware-auto-efi-varstore-aarch64 d8e0e9c3ce tests: Add firmware-auto-efi-varstore-q35 71d6399068 tests: Add firmware-manual-efi-varstore-aarch64 77b44120c5 tests: Add firmware-manual-efi-varstore-q35 bd35046517 qemu: Validate presence of uefi-vars device 12cdd61383 qemu_capabilities: Introduce QEMU_CAPS_DEVICE_UEFI_VARS 1c2dbdf3ac conf: Update validation to consider varstore element 3feee6d0ab conf: Parse and format varstore element b5da97c5b9 schema: Introduce osnvram define ccdff699ac tests: Rename custom JSON firmware descriptors 1504b7f687 conf: Move type=rom default for loader to drivers 375c82a0f8 qemu_firmware: Only set format for custom loader if path is present a03a820572 docs: Improvement related to firmware selection 38379f59c0 docs: Rename "BIOS bootloader" section to "guest firmware" 4d0c5bc5be hyperv: Add basic domainGetBlockInfo() API implementation 95d8909283 hyperv: Add resource subtype definitions 331a392b96 conf: support windows paths in virDomainDiskByName() 9b5831910f hyperv: add support for secure boot configuration 82ccd68755 hyperv: Clean up unnecessary header includes c07b4e91e3 qemu: saveimage: Use 'virFileWrapperFd' when loading non-sparse saveimage 0e2ab42778 qemu: driver: Merge 'qemuDomainRestoreInternal' and 'qemuDomainObjRestore' 72a65c6944 qemuSaveImageCreateFd: Handle case when 'virQEMUFileOpenAs' doesn't return a file fd for 'sparse' format 6a2a77b747 virfile: Introduce 'virFileFDIsRegular' 19d684706d qemuMonitorMigrateToFdSet: Drop 'flags' argument 0d3290d152 qemuSaveImageOpen: Remove wrong ATTRIBUTE_NONNULL e9b931d3e4 virpci: Report an error if virPCIGetVirtualFunctionIndex() fails edb3350c64 bhyve: implement domainGetVcpuPinInfo 387543c57f bhyve: support vcpu pinning 3ea0a44f7a qemu: Report error aborting stopped postcopy migration 6c2c9e21ac virstorageobj: Make virStoragePoolObjAddVol() report an error on failure dbdaf22b63 virsh: report "unknown" for autostart when API query fails da815a6a7b virsh: return failure exit code when UUID fetch fails f09d02bf0f news: Mention firmwareFeatures element for domaincaps cf4dfcf795 docs: Document firmwareFeature element for domaincaps 87c072c08b qemu: Fill in firmwareFeature element for domaincaps 928bdc3e67 conf: Add firmwareFeatures element for domaincaps 463322ec48 schema: Add firmwareFeatures element for domaincaps f335c578d1 tests: fix mocking on macOS f37e14119c iommufd: fix FD leak in case of error 75db232f90 tests: properly mock VFIO and IOMMU checks 63434db800 qemu: Fill iommufd domain capability 855f8fe9e2 conf: Introduce iommufd enum for domaincaps 5d16bef1a6 qemu_hotplug: Add support to hotplug host device with IOMMUFD 3f7ad3a8a5 qemu_command: Extract building IOMMUFD props to function 300ebf01b8 qemu_hotplug: Remove iommufd object if no longer needed b21b6dcc72 qemu: Save IOMMUFD state into status XML f67e4ac4d0 qemu_command: Don't use host property if IOMMUFD is used 4611f227c7 qemu: Convert vfioDeviceFd to qemuFDPassDirect df59beed37 qemu: Convert IOMMUFD to qemuFDPassDirect 4a80a0468e qemuxmlconftest: Set fake FD for IOMMUFD 15ad45758b qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData cb23831c02 qemuxmlconftest: Refactor host device preparation c83b4f367f qemu_process: Refactor qemuProcessOpenVfioFds d194f362f3 qemu_process: Fix FD leak with multiple host devices using IOMMUFD 7c062bfc4f qemu_domain: Add missing IOMMUFD cleanup 4b176cfc38 conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD 97eed30948 conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD 3365bff598 util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath 76b720168b qemu_process: Refactor qemuProcessOpenVfioDeviceFd 22c666097c util: Move openning VFIO device to virpci ff2848827f qemu_process: Refactor qemuProcessOpenIommuFd c684b83a68 util: Move openning IOMMU device to viriommufd 0c1af67be5 qemu: Move IOMMUFD validation to qemu_validate 4a0ea9bcf1 qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD cb33103c4a scripts: avoid matching 'char **' as string for systemtap 5787326541 qemu: Setup disk latency histograms on startup/hotplug/update b874c944bd Introduce support for disk operation latency histogram collection ad65b00c13 docs: formatdomain: Reword section about the '<statistics>' element under disk driver 7da1a83914 docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element ad4830ce68 qemu: monitor: Add handlers for 'block-latency-histogram-set' 237e49127a Expose latency histograms via 'virConnectGetAllDomainStats' 1c77d396ea qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' 42a39d703d qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' 1789a0f8a3 qemu: Extract disk setup done via QMP into a separate helper 11057abfd1 qemu: Wire up new hyperv host-model mode behavior 380fb89390 conf: Parse hyperv features even for host-model 79b05df9f8 bhyve: improve loader handling on arm64 e23fd0b7fd In virFDStreamRead(), fill buffer from this and next messages caf74fab50 bhyve: add capability probing for ACPI fc52d176ce bhyve: do not use deprecated IOAPIC option eaf1f15173 util: remove duplicate logging of firewall command 53d43ee5da docs: secret: Add documentation of secret encryption feature eb0b65e07a secret: Add functionality to load and save secrets in encrypted format bd6c201f9a secret: Rename virSecretObj structure attribute from base64File to secretValueFile 1c86748cf1 secret: Add secret.conf configuration file and parse it 97758bc9a0 secret: Set up default encryption secret key for the virtsecretd service ffc316e99a util: Add support for GnuTLS decryption 73a52dc108 qemuProcessRefreshDisks: Don't bother to refresh disks on cold boot 536646deaf qemuProcessUpdateVideoRamSize: Remove 'driver' argument and adjust callers 40b7e2a39b qemu: Refactor tray_status handling b9b9092c9c qemuDomainAttachDiskGeneric: Avoid unneeded disk property refresh after hotplug bc939353d9 qemuDomainDiskPrivate: Remove unused 'tray' field 8ae3835079 conf: domain: Add VIR_DOMAIN_DISK_TRAY_NONE state for devices without tray fac54e0d73 qemuDomainDiskInfo: Use proper type for 'io_status' a94d2b9871 qemuMonitorJSONGetBlockInfo: Don't fail if 'io-status' field gets new values 4666d19617 qemuMonitorJSONHandleMemoryFailure: Simplify error case and value extraction 25922c1fcb qemu: monitor: Add test validating that 'eventHandlers' are properly sorted 6f372d526f qemuMonitorJSONHandleMigrationStatus: Simplify error case ed94a8336a qemu: Drop 'removable' field from 'qemuDomainDiskInfo' 1292e757c6 qemu: process: Unexport 'qemuProcessRefreshDisks' 5b392ec976 qemuMigrationSrcBegin: Drop disk refresh step 52e09a7875 qemu: Drop 'empty' filed from 'qemuDomainDiskInfo' 56f7dd88d4 qemuProcessRefreshDiskProps: Drop code to remove disk source 074f7fba94 qemu: Remove 'removable' field from 'qemuDomainDiskPrivate' 861be1078e qemuDomainDiskInfo: Drop 'nodename' field 0d3ef7cb71 qemu: Implement support for persistent reservation migration control b0edb7eb9b qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR fb8d697554 qemucapabilitiestest: Update 'caps_11.0.0_aarch64' to 'v10.2.0-1114-gb3abdfa486' 5f5a2b0c8c qemucapabilitiestest: Update 'caps_11.0.0_x86_64' to 'v10.2.0-1114-gb3abdfa486' 06e7fee707 network: add comment to table that it belongs to libvirt aa802b8723 hyperv: Implement virDomainInterfaceAddresses() a422ebb178 hyperv: Move MAC parsing into a separate function 7fdc9111d2 virsocketaddr: Introduce virSocketAddrSubnetToPrefix() fb317b296d datatypes: Declare autofree func for virDomainInterface type 8e377728c5 nwfilter: move shared nwfilter driver functions into nwfilter_tech_driver.c 6e101ad0c7 nwfilter: remove redundant sys/utsname.h include a82cc0c435 nwfilter: rename generic names to virNWFilter* and CamelCase 7136e9155a docs: add description for USB port matching f0cdc0fca4 nodedev: add USB port to nodedev XML b97afe28f5 tests: validate an XML config with USB bus/port set 53e8f30dc8 schema: add USB port attribute 7a888d722c conf: add support for host USB port matching 73677f062f util: implement support for finding host USB devices by port 4b97cdd1a5 util: generalize the host USB device search APIs 93e1f5ee96 virusb test data: add devpath files for port addressing fc5840b498 qemu: Ignore cmp_legacy CPU flag afe6e5d260 virsh: Switch cmdDomIfAddr() to vshTable 9373d8da6a qemu_command: Generate granule prop for virtio-iommu 2eea8e3829 qemu_validate: Check whether granule of virtio-iommu is supported 43892d9915 conf: Introduce granule attribute for virtio-iommu 17693931e6 qemu_command: Generate aw_bits prop for virtio-iommu 2fccdda851 conf: Allow aw_bits for virtio-iommu befdd44bf8 qemu_capabilities: Introduce QEMU_CAPS_VIRTIO_IOMMU_AW_BITS e1c6e3fef0 conf: Teach virDomainParseMemory() new retval b4c792313a hyperv: Avoid memleak in hypervDomainDefParsePhysicalDisk 090223d01a src/esx/esx_vi.c: Debug path element comparisons 29aa558642 bhyvexml2xmltest: Avoid leaking driver caps 720f71c1da bhyvexml2argvtest: Avoid leaking firmwareDir 210cae66e0 bhyvexml2argvtest: Don't leak parts of driver config f0af542077 bhyvexml2argvtest: Avoid leaking driver caps fcc5910557 bhyvexml2argvmock: Provide virCPUProbeHost() 2f1421d83b bhyve_command: Avoid memleak in bhyveBuildNetArgStr() df2cb810a3 bhyve_command: Avoid leaking @buf in virBhyveProcessBuildBhyveCmd() 1ce8c35c29 bhyve: Avoid leaking @addrs in bhyveDomainAssignPCIAddresses() 1779a8600f bhyve: Avoid memleak in bhyveParsePassthru() bf34b90bb4 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps a4f610ff3f qemu: migration: Always offer block dirty bitmaps during migration 0c75fc1747 qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps b2fe3465de qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data 71643c197e qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' 864a70114f rpcgen: Pass XDRPROC_T_3ARGS to test_demo.c 2c66b6d72c build: add detection of xdrproc_t arguments count 74fc02d792 tests: qemuxmlconfdata: provide iommufd sample XML and CLI args 7d2f91f9cb qemu: Update Cgroup, namespace, and seclabel for iommufd 2f0999a161 qemu: open iommufd FD from libvirt backend f623080472 qemu: open VFIO FDs from libvirt backend f91a07d0c8 qemu: Support per-process memory accounting for iommufd 1043e04e17 qemu: Introduce privateData for hostdevs fd113055bb qemu: Implement support for associating iommufd to hostdev 203002249b tools: Fix chown syntax in virt-pki-validate.c (dot -> semicolon as owner and group separator) b9d9ff39d3 qemu: introduce the "virtualization" feature ca98f39e64 networkxmlconftest: Expect success for "hostdev" case only on Linux e7c6f06747 ci: regenerate with 'lcitool manifest' 240deda72c tests: Rename networkxml2xmltest to networkxmlconftest 8f5e0903d6 tests: Drop networkxml2conftest c26c7b1cd3 networkxml2xmltest: Do conf test ee8381e729 networkxml2xmltest: Sync test cases with networkxml2conftest 369020180a networkxml2xmltest: Store parsed def for future tests 2d6a376ec0 networkxml2xmltest: Dynamically allocate testInfo struct 5b2ed0d137 networkxml2xmltest: Move path generation into testRun() c24157056f networkxml2xmltest: Introduce testRun() 04034eeb34 networkxml2xmltest: Don't recreate xmlopt object eff3431dca networkxml2conftest: Allow regenerating more in one run 30baa49454 networkxml2conftest: Allow regenerating hosts file 319bbb5c84 networkxml2conftest: Avoid potential leak ecb2e06bdf test: wire up networkValidateTests() 4b98a649b3 network: Introduce networkValidateTests() 7c9b883eb3 networkxml2xmltest: Update couple of test cases d07d7a6842 networkxml2conftest: Fail tests where no dnsmasq would be spawned 82040ddce7 networkxml2conftest: Drop routed-network-no-dns test case 794338569d network: Move decision on dnsmasq need into a separate function e047ae9ec3 network: Separate private APIs declaration to bridge_driver_priv.h 9d6f5ac1f3 tests: Avoid crossdir inclusion for networkxml2* tests 13889feb14 esx: Switch to creating URLs using virURIFormat e013d5b5ca esx: Abstract all URL-creation code into one function 38c952d893 esx: Debug URL just before opening with curl 6bb982178b qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails f1ad521936 virDomainSnapshotDefAssignExternalNames: Improve error message 6bcdf4ee59 qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' 452c281aee qemuSnapshotUpdateBackingStore: Remove stale comment b43aee9cc9 qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument 65c7369107 qemu: Connect NVMe devices to PCIe bus 27fd2e97b8 Fix printf style used with virDomainIOMMUDef::aw_bits 4009126f17 src: Use device alias when ifname is unset in virDomainInterfaceAddresses() 3a10f435b7 libvirt-domain: Fix documentation of virDomainInterfaceAddresses() 6f07a8e6fc util: Remove @masked argument from virSocketAddrFormatWithPrefix adcc14e153 qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice 0cd13906dc qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument fa06437566 qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop abcdc9511b qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length 27141859f1 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (aarch64) 2425a570e3 qemucapabilitiestest: Add data for the qemu-11.0 dev cycle (x86_64) a1476a5afc qemuxmlconftest: Prepare 'fd-memory-numa-topology4' for removal of 'pc-i440fx-5.0' be58c0eaa2 qemuxmlconftest: Remove specific machine type from 'devices-acpi-index' f9cec072c4 qemuxmlconftest: Freeze 'cpu-numa-memory-oldstyle' case to qemu-10.2 70d7458186 virnetdevtap: Produce more helpful error message in virNetDevTapCreate() 845210011a esx: Allow connecting to IPv6 server e0dcf278af bhyve: workaround for the lack of UTC clock on ARM64 7b889af2d2 virt-aa-helper: Ask for no deny rule for readonly disk elements 28482f2630 syntax-check: Introduce sc_prohibit_local_with_subshell rule 2442030856 libvirt-guest.sh.in: Fix logical error in guest_is_on() 8f0cf96b66 libvirt-guests.sh: Declare and assign separately to avoid masking return values 7a0c2fba91 scripts: don't import shutil in meson-warnings.py 50ad6026ad ci: regenerate with 'lcitool manifest' 43358229fe meson: write all warning flags to 'c-warnings.txt' 50640d35ae src: remove some -D defines from compiler args a643671150 util: Fix max socket calculation dcffd15520 conf: simplify check for vlan tagging support in virDomainActualNetDefValidate() 91a2d813cb conf: validate that specified interface type supports vlan tags 3190150ebd qemu: use actual/effective vlan when updating OVS-based interface vlan tag b5a406a768 qemu: update vlan tag of macvtap (direct) passthrough devices during update-device 17976f6b2a qemu: forbid modifying network device portForwards with update-device 2e4abf4479 conf: new function virDomainNetPortForwardIsEqual() 878c5d2fa3 util: fix equivalence of AF_UNSPEC virSocketAddrs be9885c274 nwfilter: rename ebiptables unit tests and data files 289e4cbc67 domain_logcontext: Don't assume remote driver is always available 5b080bc580 qemucapabilitestest: Add 'caps_10.2.0_aarch64' test data 095e133645 qemucapabilitiesdata: Regenerate 'caps_10.2.0_x86_64' replies d917bf662b qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices 37d51c0d27 qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type badb0a8526 Align help text of virt-aa-helper with actual expectated input 05a2ad8321 syntax-check: Introduce sc_prohibit_g_autofree_const rule adb19c902b network: Drop const for forwardIf in pfAddNatFirewallRules() 973aa66571 hyperv: Drop const for resourceType in hypervDomainAttachSerial() b3a491284a rpm: disable -Werror on ELN builds bdcf0c35bb Post-release version bump to 12.1.0 4d93728466 Release of libvirt-12.0.0 0ad017a6de NEWS: Mention shared FS detection race b84e6d1b31 NEWS: Document features/improvements/bug fixes I've participated in 10a523c62a NEWS: Mention JSON nesting bug and TPM migration quirk with NFS 98329e4f12 Translated using Weblate (Korean) 49b8f0a814 Translated using Weblate (Swedish) abe668561d Translated using Weblate (Portuguese) 8d5fdea287 news: document bhyve new features for 12.0.0 c44aecc40d Update translation files 0355b2d05a po: Refresh potfile for v12.0.0 e361469ebb Translated using Weblate (Spanish) 981ffc65af Translated using Weblate (Spanish) 80879c113f Translated using Weblate (Spanish) a1c93eab00 Translated using Weblate (English (United Kingdom)) 9ad5974ecb Translated using Weblate (Spanish) 2657b10746 Translated using Weblate (Spanish) b08fe254d2 Translated using Weblate (Georgian) c91c477648 Translated using Weblate (Spanish) e8e555b625 Translated using Weblate (Czech) 855527bab5 Translated using Weblate (Georgian) 20b0880ab6 Translated using Weblate (Czech) 92b77582d4 Translated using Weblate (Swedish) d557623281 news: Mention improvements and fixes to firmware selection 563a47ea7f qemu_firmware: Allow matching both UEFI and BIOS for ROM loader 9a041e61ec qemu_firmware: Don't skip autoselection for ROM 1b78d647da qemu_firmware: ROM firmware is always in raw format 8d1bfa69b2 tests: Add firmware-manual-efi-tdx f65ef07dcf tests: Add firmware-manual-efi-sev-snp 0aa3fa2d62 qemu_firmware: Remove NVRAM to loader format copy hack 798528d2b6 qemu_firmware: Take NVRAM format into account when matching 623fc1b4b5 qemu_firmware: Take templateFormat into account when matching 91b6dee6d1 qemu_firmware: Retain user-specified NVRAM format a92c140956 qemu_firmware: Prefer template format to loader format ab8efe6fd0 qemu_firmware: Refactor setting NVRAM format ee4c619b09 qemu_firmware: Simplify handling of legacy paths 3e1c110a4d qemu_firmware: Set templateFormat for custom paths 3acdcd2eb7 qemu_firmware: Introduce qemuFirmwareFillDomainCustom() 9ec9bdc8dc tests: Add firmware-auto-efi-format-mismatch-nvramtemplate 935879fb91 tests: Add firmware-auto-efi-format-nvramtemplate-qcow2 a4f33d7228 tests: Add firmware-auto-efi-format-nvram-raw-nvramtemplate-path ab92d77339 tests: Add firmware-auto-efi-format-nvram-raw-loader-path c8536599f2 tests: Add firmware-auto-efi-format-nvram-raw 13ce34e646 tests: Add firmware-manual-efi-nvram-template-nonstandard-legacy-paths 17979f08b9 tests: Add firmware-manual-efi-nvram-template-nonstandard-format 2bd0499294 schemas: Allow templateFormat without template path 876a5d34d4 qemu_firmware: Drop fallback for absent nvramTemplateFormat 3463e543fe qemu_firmware: Ignore stateless/combined when NVRAM is configured c74adb33e4 domain_validate: Reject ROMs with format other than raw 5bae6e3640 tests: Add firmware-auto-efi-format-loader-qcow2-rom a5ae34aa74 domain_validate: Reject read/write ROMs 26035762a9 tests: Add firmware-manual-bios-rw 07bcd51bcb tests: Add firmware-auto-bios-rw 46970217a8 domain_validate: Reject NVRAM with read/write firmware 27313799ba tests: Add firmware-manual-efi-rw-nvram 4df091dea4 qemu_firmware: Move copying of nvram.format to loader.format 5b374c5e3f qemu_firmware: Move format=raw compat exception aaa0db64b4 qemu_firmware: Drop 'nvram' local variable 3f7eea0e17 qemu_firmware: Drop support for kernel descriptors 86a4ede0ec qemu: capabilities: Update 'caps_10.1.0_x86_64+inteltdx' after release 28015f020c qemu: capabilities: Update 'caps_10.2.0_x86_64+mshv' after release 1be917837e qemu: capabilities: Update '10.2' capabilities on x86_64 after release 380764992d qemucapabilitiesdata: Re-generate 'caps_10.2.0_x86_64' 0bdf8188d6 esx_util: Drop extra spacing 6c9d2591c6 esx: URI encode inventory objects twice ffe74c7c55 esx_util: Introduce esxUtil_EscapeInventoryObject() 871a8f872d qemu: fix locking in qemuProcessHandleMemoryFailure 32749427de network: fix memory leak in leaseshelper.c d50de61f34 bhyve: report domain capabilities for arm64 1b0c9d21b7 bhyve: tests: add xml2xml arm64 tests eaeb1712a7 bhyve: tests: prepare for arm64 xml2xml tests 8c971cdce1 bhyve: command: handle arm64 bootloader 24be4b8c0c bhyve: command: make -H and -P args amd64-only 90df4b6795 bhyve: command: handle arm64 console c3c8c7e8cc bhyve: domain: require ISA controller on x86_64 only 35b99f4994 bhyve: tests: support arch-dependent tests c957dea309 bhyve: capabilities: fix for arm64 ca3cbae5af virQEMUSaveDataNew: Refactor cleanup ccf008b85f qemu: snapshot: Check earlier if memory snapshot is possible ac8d241620 qemuSaveImageCreate: Remove 'driver' argument a8a62682fd qemuSaveImageCreateFd: Remove 'driver' argument d4a5183674 qemuMigrationSrcToFile: Remove 'driver' argument 5d0d55f238 qemuMigrationSrcToSparseFile: Remove 'driver' argument 073306b4ad qemuDomainEventEmitJobCompleted: Remove 'driver' argument 256ce775d9 qemuMigrationSrcToLegacyFile: Remove 'driver' argument c6988fdb2f qemuHotplugAttachDBusVMState: Remove 'driver' argument a175096c37 qemu: snapshot: Don't overwrite 'ret' in qemuSnapshotCreateActiveExternal d86259d5a7 docs: bhyve: document virtio-scsi support 790719be6b bhyve: add virtio-scsi support 1001371fba conf: introduce CTL storage type 6df374fefc qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX 8e9a9f86b0 qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX 40f8bed857 libvirt-guests.service: use Type=exec b3ede6618d tools: check for failure decoding secret base64 value 2d65cdeba8 docs: fix broken UUID example 16804acf14 virjsontest: Add test for nesting depth b49d41b7e9 util: json: Increase JSON nesting limit when parsing to 300 bfd1a1a885 bhyve: rework capabilities probing d3735f71ec tests: Remove temporary TZ parsing workaround a54cafa62b news: Fix indentation e727c8afad network: Propagate DNS forwarder port into dnsmasq config 72e4efbfa6 network: Introduce port for DNS forwarder dad8b0fc52 bhyve: bhyvexml2argvtest: fix SLIRP tests 437c135671 docs: drvbhyve: document SLIRP networking ffa6b2e892 bhyve: implement SLIRP networking 2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vgabios: remove recipe, drop from xen-tools DEPENDSBruce Ashfield2026-03-243-57/+1
| | | | | | | | vgabios 0.8a depends on dev86-native which was removed in a previous commit (upstream repo deleted). vgabios is a legacy VGA BIOS from 2008 that has been superseded by SeaBIOS which is already a Xen dependency. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: update to v1.9.5Bruce Ashfield2026-03-241-2/+2
| | | | | | | | | | | | Bumping irqbalance to version v1.9.5-5-gcd9212f, which comprises the following commits: 8929e4d Reset banned_cpus explicitly for IRQBALANCE_BANNED_CPULIST 2804ba1 Change warnings about un-affine-able irqs to LOG_DEBUG cf76396 Update configure.ac/meson.build for irqbalance 1.9.5 907b65f meson: force systemd-service installation with a seperate option 4f53f8c Fix irqbalance for Xen virtual event interrupts Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: fix build with current toolchainBruce Ashfield2026-03-249-633/+14
| | | | | | | | | | | | | | | | | | Update ipxe for compatibility with the current OE toolchain: - Add coreutils-native to DEPENDS for cksum (used by build system to generate checksums embedded in binary images) - Drop syslinux and cdrtools-native from DEPENDS, remove ISOLINUX_BIN from EXTRA_OEMAKE - Skip ISO and USB image generation from the ALL target - only ROM files are needed for Xen HVM and the ISO tools (genisoimage/xorrisofs) are not compatible with cdrtools' mkisofs - Drop patches applied upstream: gcc-10 warning fix, golan type casts, fcommon directive, xenver.h typo, old-style function definition, C23 reserved words, and unsafe function wrapper - Refresh ipxe-fix-hostcc-nopie-cflags.patch for new line numbers Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ipxe: update to v2.0.0Bruce Ashfield2026-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping ipxe to version v2.0.0-13-ga0bf3f1cc, which comprises the following commits: a0bf3f1cc [cloud] Omit uploading empty blocks to EBS snapshots 5921e6b45 [cloud] Add utility to read INT13CON partition in Alibaba Cloud 619b1db1b [bnxt] Update conditions for invoking short commands c3560072e [cloud] Add utility for importing images to Alibaba Cloud 7b3eb3c86 [undi] Drag in PCI-specific configuration 88d396719 [efi] Add a dummy SBOM PE section 847e09850 [ci] Add a workflow to import images to Google Cloud 013a4a93d [cloud] Specify Google Cloud project explicitly for storage client e180aa85e [test] Assign unique MAC addresses for test network devices 5edffb26b [ci] Fix family name used for AWS image imports e9b80ee54 [ci] Add a workflow to import images to AWS EC2 c44d5f96e [cloud] Add ability to upload AMI list to an S3 bucket 33ca177cf [release] Update version number after release 12798ec29 [release] Release version 2.0.0 616506924 [doc] Update change log in preparation for release 94138656d [efi] Do not unconditionally raise back to internal TPL cbeda2012 [efi] Allow creating an image device handle with no parent device 5a17d8daf [efi] Install protocols onto a dedicated device handle 910d9c5a9 [efi] Allow executing images even with no open network devices 3df8f9c37 [efi] Try all supported autoexec protocols b677399da [efi] Treat a URI device path as higher priority than a cached DHCP packet 8df45c2f3 [github] Add organization to sponsorship links 608dde2ad [doc] Add contribution guidelines f7fe2b319 [cachedhcp] Set current working URI to cached DHCP filename 027d0fe24 [ci] Include Secure Boot ISO and USB images in release artifacts 559282d5a [build] Use Markdown consistently within release notes 3680a4ae5 [build] Add support for including a UEFI shim in filesystem images 1fbc3bca7 [efi] Automatically open network device matching loaded image device path a69afd743 [tftp] Use TFTP server URI only if no other working URI is set fa993d524 [tls] Transmit a closure alert when closing the connection 4d0b0cd4c [tls] Respond to received closure alerts efe812637 [cachedhcp] Automatically open network device matching cached DHCPACK 879549da3 [dynui] Allow for duplicate shortcut keys f00d2079d [doc] Add release process documentation ad748f0d9 [bnxt] Update link speed definitions 7ce5dbd76 [efi] Allow for the existence of multiple shim lock protocols 596c84ce7 [efi] Support the EFI_PXE_BASE_CODE_TFTP_GET_FILE_SIZE operation b48965ae5 [xferbuf] Silently discard data written to a void data transfer buffer 3194c8ad0 [xferbuf] Record maximum required size 7948ffe32 [ci] Remove now-redundant "netboot" job 9250a9091 [build] Create util/gensrvimg for building network boot server images f0ceb70cb [bnxt] Fix memory leak in probe() a6d393ecc [bnxt] Skip unnecessary calls for VFs 9443f7a2a [tls] Remove current time from client random bytes 1b6d88d64 [ipv6] Obtain MTU setting from NDP 1eb571cef [bnxt] Remove access of deprecated link speed variables a5e4bb98b [bnxt] Fix typo in function declaration df5957ccc [bnxt] Fix coding style 9d6831bb0 [bnxt] Correct port index usage 2012ab71d [pxeprefix] Add a minimal iPXE NBP metadata header 47467538f [build] Use little-endian word values in genfsimg 0854850d0 [ci] Add a job to automatically create releases 179366d72 [ci] Remove redundant duplicate creation of version.txt 9e0057a86 [build] Allow for generation of all release information a82e0b41a [doc] Fix header levels in Markdown files df2ef86d1 [doc] Update README 53a3365be [doc] Add an initial changelog 8fb90cb40 [build] Allow for construction of a text file containing the version 0cde7ce6d [build] Mark system logger as permitted for UEFI Secure Boot 2184bfdb0 [ci] Create a network bootable files archive as a build artifact d98278a17 [ci] Include latest iPXE shim in build artifacts 80639a6ca [ci] Use ipxe-builder-utils container for combined BIOS/UEFI images 93fc2123c [ci] Include CA certificate file alongside signed binaries a956c5fea [ci] Allow for manually triggered workflow runs 21b5bd840 [ci] Add support for building UEFI Secure Boot signed binaries 1d23d5a03 [ci] Schedule Coverity Scan run via GitHub Actions 2161e976c [build] Include USB drivers in the all-drivers build by default ae8e23a45 [build] Handle all driver list construction via parserom.pl c9158cb32 [build] Mark Xen HVM files as permitted for UEFI Secure Boot 7caee4489 [ci] Include Linux userspace build artifacts 6dc991d07 [slirp] Disable warnings for uncleanly deprecated libslirp functions 25429d952 [build] Include PCI drivers only in BIOS and UEFI builds 3f12b8b1c [build] Include devicetree drivers in the SBI all-drivers build 81da1a1b6 [dt] Add DT_ROM() and DT_ID() macros 5669c4d52 [build] Include Xen and Hyper-V drivers only in x86 BIOS and UEFI builds 0992d9b56 [build] Include Linux network drivers in the Linux all-drivers build 6e56f7ff2 [linux] Remove unused can_probe field from driver definition 8a1dd5850 [build] Include ISA drivers only in 32-bit BIOS builds cc4a9df97 [ci] Include Secure Boot build artifacts cf350b8eb [build] Filter out non-permitted drivers for UEFI Secure Boot 7a2817bbd [build] Drag in Xen and Hyper-V support via network device drivers 99a9e6e43 [build] Construct driver rules for USB devices e783adcfd [build] Construct driver lists for each bus type 152351219 [build] Allow PCI_ROM() and ISA_ROM() to span multiple lines 4d6c8ab44 [usb] Add USB_ROM() and USB_ID() macros 481e04311 [librm] Work around two errata in the 386's "popal" instruction cd9b44e57 [syslog] Allow port number to be specified for encrypted syslog server 362b704f8 [ci] Include supported network device list in build artifacts 18fab8dd8 [loong64] Fix error identifier generation for LoongArch64 12b279b4c [ci] Include error identifier list in build artifacts 95e756569 [pci] Ignore invalid subordinate bus numbers aa06a76eb [ci] Show rolling release publication URL c18d89570 [efi] Cache identified PCI root bridge I/O protocol handle 30d162ddd [uri] Ensure "##params=" separator is correct 59c67e111 [ci] Run tests on pull requests 5abbcab90 [build] Mark MS-CHAPv2 as permitted for UEFI Secure Boot 9106130f6 [build] Ensure dependencies of version.c are always rebuilt as expected a565e18f3 [build] Exclude local named config headers from annotation checks b05a045b4 [ci] Publish rolling release binaries via https://boot.ipxe.org 74e0551ac [ci] Publish rolling release build artifacts with stable URLs e855c4c64 [ci] Produce combined BIOS/UEFI ISO and USB images 8e10974c8 [ci] Upload a selection of build artifacts from each run dee71adda [build] Exclude external files from annotation checks 301b1ecf2 [build] Mark compressed image tools as permitted for UEFI Secure Boot c07fb71a9 [build] Mark FDT management tools as permitted for UEFI Secure Boot 6b17d320d [build] Mark core arm64 files as permitted for UEFI Secure Boot f1bcd160a [xen] Update to latest stable release headers 8e31ac9fc [build] Mark dummy architecture headers as permitted for UEFI Secure Boot 40c2db9d6 [build] Mark direct kernel loading as forbidden for UEFI Secure Boot 4db03054d [build] Mark GDB stub as forbidden for UEFI Secure Boot 03a906a9f [build] Mark Realtek driver as permitted for UEFI Secure Boot b7e7f62b8 [efi] Avoid dragging in IPv4, IPv6, and DNS support unconditionally e31dc79d4 [build] Mark EFI SNP/MNP driver wrappers as permitted for UEFI Secure Boot 641ea020f [prefix] Make unlzma.S compatible with 386 class CPUs d0ea2b1bb [ci] Use prebuilt containers to build and test iPXE 207c99a47 [build] Allow GITVERSION to be specified as an environment variable 0abef79a2 [build] Do not use "git log" to construct build timestamp faa42c850 [build] Do not use "git describe" to construct version number a42a15ae9 [build] Allow for per-architecture sysroots 6eab3dbcd [ci] Update to ubuntu-24.04 GitHub actions runner 05cb93046 [build] Extend default configuration for non-BIOS builds 4157afc12 [usb] Drag in USB commands only when USB support is present f3abf2b9d [pci] Drag in PCI commands only when PCI support is present f7f685f8c [build] Canonicalise console type configuration ce6f574a9 [build] Canonicalise USB configuration 6ad6af198 [build] Canonicalise settings sources configuration ff80a1758 [build] Sort general configuration in order of approachability 360c0f336 [build] Canonicalise remaining portions of general configuration d27cf68e0 [build] Canonicalise SAN boot protocol configuration 464916f99 [build] Canonicalise download protocol configuration f869132d6 [build] Canonicalise network protocol configuration e72c331aa [build] Canonicalise command list configuration 9f4b9f60f [build] Canonicalise image type configuration c7403e7e5 [build] Mark more reviewed files as permitted for UEFI Secure Boot 1d5b1d924 [build] Fail Secure Boot builds unless all files are permitted 46510f36a [build] Mark MD4 and MD5 as forbidden for UEFI Secure Boot adcaaf9b9 [build] Mark known reviewed files as permitted for UEFI Secure Boot 6cccb3bdc [build] Mark core files as permitted for UEFI Secure Boot 1996e214e [build] Check for standalone FILE_LICENCE() and FILE_SECBOOT() declarations 49f700a25 [console] Mark generated keymaps as permitted for Secure Boot 30948987f [build] Mark existing files as explicitly forbidden for Secure Boot b09af00fa [efi] Mark imported EDK2 headers as permitted for Secure Boot c5ae9ec99 [efi] Update to current EDK2 headers e61c636bf [build] Define a mechanism for marking Secure Boot permissibility 9c01c5a5d [neighbour] Treat delayed transmissions as pending operations 2110afb35 [tcp] Report TCP statistics via the "ipstat" command a8c89276c [malloc] Increase heap size to 4MB 8e557f1ab [tcp] Discard packets that lie immediately before the receive window ff6d612e7 [neighbour] Add the ability to artificially delay outbound packets 33c832b0d [neighbour] Split out deferred transmission from discovery completion aabfb8a94 [neighbour] Use discovery protocol field to identify incomplete neighbours d0e01bb3f [neighbour] Always use network device's own link-layer address 7c39c04a5 [crypto] Allow for zero-length big integer literals 01038893a [test] Update big integer tests to use okx() 383214794 [crypto] Fix identification of non-wrapped elliptic curve identifiers 5aab6b7a3 [crypto] Add ECDSA-based TLS cipher suites f1e23b53a [test] Add test cases for X.509 certificates with ECDSA signatures d6eeb9039 [crypto] Add OID-identified algorithms for ECDSA with SHA2 hash family d14066e92 [crypto] Allow ecPublicKey to be identified as a public-key algorithm f3147b42a [test] Ensure OID-identified algorithms are present for X.509 tests aa247f6e3 [x509] Correct debug message 4e3cbeef8 [crypto] Add support for ECDSA signatures 948677fe5 [test] Test verification of constructed signature cfbf0da93 [crypto] Allow for an explicit representation of point at infinity af99310f5 [test] Test signature verification independently of signing 3d5cd3d79 [intel] Add PCI ID for I219-V and -LM 24 86c40a8b1 [efi] Retry calls to GetRNG() as needed fb1188936 [crypto] Generalise rsa_parse_integer() to asn1_enter_unsigned() c7f129fed [crypto] Allow for addition of arbitrary Weierstrass curve points 1e353ff36 [crypto] Split out Weierstrass point initialisation and finalisation d3adea838 [crypto] Expose the (prime) group order as an elliptic curve property 80e98dc0d [crypto] Verify that weierstrass_multiply() result is not point at infinity b362f77bd [test] Allow for elliptic curve tests other than multiplication e50e30a7f [crypto] Expose the base point as an explicit elliptic curve property 88c3e68df [http] Abort connections after a long period of inactivity 1a789c1da [http] Rename connection retry timer 64f936d5d [crypto] Allow for OID-identified elliptic curve algorithms e6610b793 [test] Include key matching in existing public-key tests 3e566818f [crypto] Remove obsolete maximum output length method 1ccc320ee [crypto] Construct asymmetric ciphered data using ASN.1 builders d4258272c [crypto] Construct signatures using ASN.1 builders 8cd963ab9 [crypto] Pass signatures for verification as ASN.1 cursors c9c028259 [crypto] Restructure handling of ASN.1 bit strings d73981aec [intel] Add PCI IDs for I225 and I226 chipsets 19dffdc83 [efi] Allow for creating devices with no EFI parent device dfea3bbfa [pci] Use runtime selectable PCI I/O API for EFI cloud builds 9c1ac48bc [pci] Allow probing permission to vary by range ff1a17dc7 [pci] Use linker tables for runtime selectable PCI APIs 0cf2f8028 [pci] Allow PCI configuration space access mechanism to vary by range 81496315f [arm] Avoid unaligned accesses for memcpy() and memset() 338347465 [efi] Wrap a selection of runtime services calls 925af2b4d [efi] Allow SAN-booted images to be traced via DEBUG=efi_wrap 0a8e34657 [efi] Add image security database GUID definition 5c135240b [efi] Add Microsoft vendor GUID definition 5154b6fcc [efi] Add storage security command protocol header and GUID definition 27ec3c76a [efi] Update to current EDK2 headers 3a2f75b78 [efi] Mark Arm/ProcessorBind.h as a non-imported header f0d978d8b [efi] Mark Ip4Config.h as a non-imported header f9b9ef578 [efi] Mark UgaDraw.h as a non-imported header c0ac23fc5 [efi] Switch back to VA_START() etc macros for EFIAPI functions 360aa7064 [efi] Skip including the EDK2 ProcessorBind.h header for 32-bit RISC-V df7f59d47 [pci] Move ECAM pci_can_probe() definition to correct header file b41bda441 [spcr] Accept alternative type value for a 16550-compatible UART 6d9374e5a [acpi] Allow acpi_ioremap() to map a port I/O address bd3982b63 [ioapi] Allow iounmap() to be called for port I/O addresses f2ea97102 [spcr] Use the serial port defined by the ACPI SPCR by default 595ff2403 [spcr] Add support for the ACPI Serial Port Console Redirection table 8fd5e2772 [acpi] Add acpi_ioremap() to map an ACPI-described address 08d4d7fe9 [uart] Make baud rate a property of the UART a786c8d23 [uart] Support 16550 UARTs accessed via either MMIO or port I/O f7de1b53d [ioapi] Provide combined MMIO and port I/O accessors fde35ff00 [pci] Disable decoding while setting a BAR value 606e87ec7 [cloud] Display instance type in AWS EC2 0336e2987 [ena] Leave queue base address empty when creating a low latency queue 0ddd83069 [riscv] Correct page table stride calculation 426c721e3 [librm] Correct page table stride calculation c8f088d4e [cloud] Display build architecture in AWS EC2 416a2143a [cloud] Remove AWS public image access block only if not already unblocked ba1846a0d [cloud] Remove AWS public image access block automatically if needed b2e846821 [ena] Limit receive queue size to work around hardware bugs 846c505ae [ena] Increase transmit queue size to match receive fill level 0ae5e25de [ena] Add memory barrier after writing to on-device memory c296747d0 [ena] Increase receive fill level c1badf71c [ena] Add support for low latency transmit queues 0d15d7f0a [ena] Record supported device features e5e371f48 [ena] Cancel uncompleted transmit buffers on close dcc5d36ce [ena] Map the on-device memory, if present 510f3e5e1 [ena] Add descriptive messages for any admin queue command failures 3538e9c39 [pci] Record prefetchable memory window for PCI bridges 04a61c413 [ena] Use pci_bar_set() to place device within bridge memory window 94902ae18 [pci] Handle sizing of 64-bit BARs e80818e4f [tls] Disable renegotiation unless extended master secret is used 57504353f [tls] Refuse to resume sessions with mismatched master secret methods ab64bc5b8 [tls] Add support for the Extended Master Secret d6656106e [tls] Generate master secret only after sending Client Key Exchange 4f44f6240 [gve] Rearm interrupts unconditionally on every poll f5ca1de73 [gve] Use raw DMA addresses in descriptors in DQO-QPL mode 1cc1f1cd4 [gve] Report only packet completions for the transmit ring d2e1e591a [gve] Use dummy interrupt to trigger completion writeback in DQO mode c2d7ddd0c [gve] Add missing memory barriers 543829964 [intelxl] Use default dummy MSI-X target address 4224f574d [pci] Map all MSI-X interrupts to a dummy target address by default ce30ba14f [gve] Select preferred operating mode 74c9fd72c [gve] Add support for out-of-order queues 0d1ddfe42 [gve] Cancel pending transmissions when closing device cf5349754 [bnxt] Handle link related async events 4508e1023 [gve] Allow for descriptor and completion lengths to vary by mode 20a489253 [gve] Rename GQI-specific data structures and constants 86b322d99 [gve] Allow for out-of-order buffer consumption b8dd3c384 [gve] Add support for raw DMA addressing 9f554ec9d [gve] Add concept of a queue page list base device address 91db5b68f [gve] Set descriptor and completion ring sizes when creating queues 048a34670 [gve] Add concept of operating mode 610089b98 [gve] Remove separate concept of "packet descriptor" ee9aea789 [gve] Parse option list returned in device descriptor 6464f2edb [bnxt] Add error recovery support 969ce2c55 [efi] Use current boot option as a fallback for obtaining the boot URI c10da8b53 [efi] Add ability to extract device path from an EFI load option 5bec2604a [libc] Add wcsnlen() 61b4585e2 [efi] Drag in MNP driver whenever SNP driver is present a53ec4493 [bnxt] Update CQ doorbell type 8460dc4e8 [dwgpio] Use fdt_reg() to get GPIO port numbers 88ba01176 [fdt] Provide fdt_reg() for unsized single-entry regions 9d4a2ee35 [cmdline] Show commands in alphabetical order 332241238 [digest] Treat inability to acquire an image as a fatal error 6fa901530 [digest] Add "--set" option to store digest value in a setting f5467d69d [github] Extend sponsorship link f45782f9f [digest] Add commands for all enabled digest algorithms 2e4e1f7e9 [dwgpio] Add driver for the DesignWare GPIO controller 90fe3a292 [gpio] Add a framework for GPIO controllers 5f10b7455 [fdt] Use phandle as device location f7a1e9ef8 [dwmac] Show core version in debug messages 01b1028d4 [bnxt] Remove unnecessary test_if macro 6ca7a560a [bnxt] Remove unnecessary I/O macros be551d420 [serial] Explicitly initialise serial console UART to NULL a814c4605 [riscv] Place explicitly zero-initialised variables in the .data section 5bda1727b [riscv] Allow for poisoning .bss section before early initialisation e3a6e9230 [undi] Assume that legacy interrupts are broken for any PCIe device 65b8a6e45 [pxeprefix] Display PCI vendor and device ID in PXE startup banner fb082bd4c [fdt] Add ability to locate node by phandle e01e5ff7c [dwusb] Add driver for DesignWare USB3 host controller 6c42ea127 [xhci] Allow for non-PCI xHCI host controllers eca97c2ee [xhci] Use root hub port number to determine slot type 8a8904aad [efi] Check only the non-extended WaitForKey event 8701863a1 [efi] Allow compiler to perform type checks on EFI_EVENT 1e3fb1b37 [init] Show initialisation function names in debug messages 7ac4b3c6f [efi] Assume that vendor wireless drivers are unusable via SNP c3376f864 [efi] Drop to external TPL for calls to ConnectController() c01c3215d [efi] Provide efi_tpl_name() for transcribing TPLs in debug messages 434462a93 [riscv] Ensure coherent DMA allocations do not cross cacheline boundaries d539a420d [riscv] Support the standard Svpbmt extension for page-based memory types 2aacb346c [riscv] Create coherent DMA mapping of 32-bit address space on demand 0611ddbd1 [riscv] Use 1GB pages for I/O device mappings c2cdc1d31 [dwmac] Add driver for DesignWare Ethernet MAC bbabde8ff [riscv] Invalidate data cache on completed RX DMA buffers 634d9abef [riscv] Add optimised TCP/IP checksumming 101ef74a6 [riscv] Provide a DMA API implementation for RISC-V bare-metal systems 22de0c4ed [dma] Use virtual addresses for dma_map() 06083d267 [build] Handle isohybrid with xorrisofs e223b3251 [riscv] Support explicit cache management operations on I/O buffers 6a75115a7 [riscv] Add support for detecting T-Head vendor extensions 19f1407ad [iobuf] Ensure I/O buffer data sits within unshared cachelines c21443f0b [uaccess] Allow for coherent DMA mapping of the 32-bit address space d75d10df1 [riscv] Create coherent DMA mapping for low 4GB of address space 3fd54e4f3 [riscv] Construct invariant portions of page table outside the loop 6bc55d65b [bnxt] Update supported devices array 002062777 [bnxt] Update device descriptions 126366ac4 [bnxt] Remove VLAN stripping logic 4262328c1 [github] Add sponsorship link 54392f0d7 [bnxt] Increase Tx descriptors e5953ed7e [build] Disable use of common symbols 8df3b9640 [build] Allow for the existence of small-data sections d3e10ebd3 [legacy] Allocate legacy driver .bss-like segments at probe time 6ea800ab5 [legacy] Rename the global legacy NIC to "legacy_nic" d0c02e0df [legacy] Allocate extra padding in receive buffers 97f40c5fc [pxe] Use a weak symbol for isapnp_read_port c33ff76d8 [fdtcon] Add basic support for FDT-based system serial console 9ada09c91 [dwuart] Read input clock frequency from the device tree 0ed1dea7f [uart] Wait for 16550 UART to become idle before modifying LCR 2ce1b185b [serial] Allow platform to specify mechanism for identifying console 5d9f20bbd [dwuart] Add "ns16550a" compatible device ID d1823eb67 [riscv] Inhibit SBI console when a serial console is active 25fa01822 [riscv] Serialise MMIO accesses with respect to each other 53a3befb6 [dwuart] Add a basic driver for the Synopsys DesignWare UART cca1cfd49 [uart] Allow for dynamically registered 16550 UARTs 71b4bfb6b [uart] Add support for MMIO-accessible 16550 UARTs 6c8fb4b89 [uart] Allow for the existence of non-16550 UARTs 60e167c00 [uart] Remove ability to use frame formats other than 8n1 5783a10f7 [riscv] Write SBI console output to early UART, if enabled 41e65df19 [riscv] Maximise barrier effects of memory fences 7e96e5f2e [fdt] Allow paths and aliases to be terminated with separator characters 1de3aef78 [bnxt] Remove TX padding 3e8909cf5 [fdtmem] Limit relocation to 32-bit address space c4a3d438e [dt] Allow for creation of standalone devices b5fb7353f [ipv4] Add support for classless static routes e648d23fb [ipv4] Extend routing mechanism to handle non-default routes 96f586466 [ipv4] Add self-tests for IPv4 routing 1ae75a3bd [test] Add infrastructure for test network devices 5b3ebf8b2 [riscv] Support T-Head CPUs using non-standard Memory Attribute Extension 817145fe0 [riscv] Do not set executable bit in early UART page mapping 7df005c4c [riscv] Add fences around early UART writes 88cffd75a [riscv] Zero SATP after any failed attempt to enable paging bb2011241 [dt] Locate parent node at point of use in dt_ioremap() 1762568ec [fdt] Provide ability to locate the parent device node d64250918 [fdt] Add tests for device tree creation 3fe321c42 [riscv] Add support for a SiFive-compatible early UART 2e27d772c [riscv] Support mapping early UARTs outside of the identity map 98fdfdd25 [riscv] Add support for writing prefix debug messages direct to a UART 2e8d45aee [riscv] Create macros for writing characters to the debug console 6eb51f1a6 [riscv] Ignore riscv,isa property in favour of direct CSR testing 192cfc3cc [image] Use image name rather than pointer value in all debug messages eae9a2754 [riscv] Support mapping I/O devices outside of the identity map 6af4a022b [fdtmem] Ignore reservation regions with no fixed addresses 56f5845b3 [riscv] Include carriage returns in libprefix.S debug messages 09140ab2c [memmap] Allow explicit colour selection for memory map debug messages 8d88870da [riscv] Support older SBI implementations 036e43334 [memmap] Rename addr/last fields to min/max for clarity cd38ed4fa [lkrn] Support initrd construction for RISC-V bare-metal kernels c713ce5c7 [initrd] Squash and shuffle only initrds within the external heap 4a39b877d [initrd] Split out initrd construction from bzimage.c 11929389e [initrd] Allow for images straddling the top of the reshuffle region 029c7c417 [initrd] Rename bzimage_align() to initrd_align() 9231d8c95 [initrd] Swap initrds entirely in-place via triple reversal 11e01f065 [uheap] Expose external heap region directly e05604107 [uheap] Prevent allocation of blocks with zero physical addresses b9095a045 [fdtmem] Allow iPXE to be relocated to the top of the address space a53456334 [riscv] Speed up memmove() when copying in forwards direction 20d2c0f78 [lkrn] Shut down devices before jumping to kernel entry point 969e8b546 [lkrn] Allow a single initrd to be passed to the booted kernel 9bc559850 [fdt] Allow an initrd to be specified when creating a device tree c1cd54ad7 [initrd] Move initrd reshuffling to be architecture-independent code d15a11f3a [image] Use image replacement when executing extracted images e2f4dba2b [lkrn] Add support for EFI zboot compressed kernel images ecac4a34c [lkrn] Add basic support for the RISC-V Linux kernel image format d0c35b682 [bios] Use generic external heap based on the system memory map 140ceeeb0 [riscv] Use generic external heap based on the system memory map 4d560af2b [uheap] Add a generic external heap based on the system memory map 490f1ecad [malloc] Allow heap to specify block and pointer alignments c6ca3d3af [malloc] Allow for the existence of multiple heaps 83449702e [memmap] Remove now-obsolete get_memmap() 624d76e26 [bios] Use memmap_describe() to find an external heap location 79c30b92a [settings] Use memmap_describe() to construct memory map settings c8d64ecd8 [bios] Use memmap_describe() to find a relocation address dbc86458e [comboot] Use memmap_describe() to obtain available memory d0adf3b4c [multiboot] Use memmap_describe() to construct Multiboot memory map 25ab8f462 [image] Use memmap_describe() to check loadable image segments a353e7080 [memmap] Use memmap_dump_all() to dump debug memory maps 3812860e3 [bios] Describe umalloc() heap as an in-use memory area 4c4c94ca0 [bios] Update to use the generic system memory map API 3f6ee9573 [fdtmem] Update to use the generic system memory map API bab3d7671 [memmap] Define an API for managing the system memory map f6f11c101 [tests] Remove prehistoric umalloc() test code e0c4cfa81 [fdtmem] Record size of accessible physical address space 64ad1d03c [bios] Rename memmap.c to int15.c 1dd9ac13f [bnxt] Use updated DMA APIs 08edad7ca [bnxt] Return proper error codes in probe 4d39b2dcc [crypto] Remove redundant null pointer check d1c1e578a [riscv] Add a .pf32 build target for padded parallel flash images 6fd927f92 [riscv] Perform a writability test before applying relocations 4566f5975 [riscv] Avoid potentially overwriting the scratch area during relocation 8e38af800 [riscv] Add a .lkrn build target resembling a Linux kernel binary 17fd67ce0 [riscv] Relocate to a safe physical address on startup 3dfc88158 [riscv] Construct page tables based on link-time virtual addresses c45dc4a55 [riscv] Allow apply_relocs() to use non-inline relocation records 420e475b1 [riscv] Return accessible physical address space size from enable_paging() 6fe9ce66a [fdtmem] Add ability to parse FDT memory map for a relocation address 2e45106c0 [riscv] Ensure that prefix_virt is aligned on an xlen boundary 95ede670b [riscv] Hold virtual address offset in the thread pointer register f988ec09e [fdt] Generalise access to "reg" property 3027864f1 [riscv] Use load and store pseudo-instructions where possible 134d76379 [build] Formalise mechanism for accessing absolute symbols 1d58d928f [libc] Display assertion failure message before incrementing counter 8fe3c68b3 [riscv] Add support for disabling 64-bit and 32-bit paging 5b19ddbb3 [riscv] Return virtual address offset from enable_paging() 5e518c744 [riscv] Restore temporarily modified PTE within 32-bit transition code 0279015d0 [uaccess] Generalise librm's virt_offset mechanism for RISC-V e8a6c2657 [build] Constrain PHYS_CODE() and REAL_CODE() to use i386 registers 12dee2dab [riscv] Add debug printing of hexadecimal values in libprefix.S 72c81419b [riscv] Move prefix system reset code to libprefix.S 764183504 [riscv] Add basic debug progress messages in libprefix.S 9445a9ff4 [riscv] Provide a millicode variant of print_message() dc9e6f0ed [riscv] Move prefix debug message printing to libprefix.S b3cbdc86f [riscv] Place prefix debug strings in .rodata 4bef4c806 [riscv] Use compressed relocation records 8f7aa292a [riscv] Place .got and .got.plt in .data e37e3f17e [riscv] Discard ELF hash tables 70bb5e5e6 [zbin] Allow for constructing compressed dynamic relocation records 98646b9f0 [build] Allow for 32-bit and 64-bit versions of util/zbin 4c11737d5 [riscv] Add support for enabling 32-bit paging a32f3c2bc [riscv] Add support for enabling 64-bit paging dad206026 [riscv] Allow for a non-zero link-time address a4b5dd63c [riscv] Split out runtime relocator to libprefix.S 1534b0a6e [uaccess] Remove redundant virt_to_user() and userptr_t a169d7359 [uaccess] Reduce scope of included uaccess.h header 05ad7833c [image] Make image data read-only to most consumers cd803ff2e [image] Add the concept of a static image 330391001 [image] Move embedded images from .rodata to .data 2d9a6369d [test] Separate read-only and writable CMS test images b6f9e4bab [uaccess] Remove redundant copy_from_user() and copy_to_user() a69c42dd9 [image] Clear recorded replacement image immediately after consuming 9962c0a58 [bofm] Remove userptr_t from BOFM table parsing and updating 080072384 [bofm] Allow BOFM tests to be run without a BOFM-capable device driver 4e909cc2b [build] Remove some long-obsolete unused header files 6c9dc063f [peerdist] Remove never-used peerdist_msg_blk() macro 54c4217bd [peerdist] Remove userptr_t from PeerDist content information parsing 837b77293 [xferbuf] Simplify and generalise data transfer buffers 43fc51629 [prefix] Remove userptr_t from command line image construction c9fb94dba [comboot] Remove userptr_t from COM32 API implementation f001e61a6 [comboot] Remove userptr_t from COMBOOT API implementation ef9711958 [comboot] Remove userptr_t from COMBOOT image parsing 0b45db397 [uaccess] Remove redundant UNULL definition 6ccb6bcfc [bzimage] Remove userptr_t from bzImage parsing 412ad5601 [initrd] Use physical addresses for calculations on initrd locations ef3827cf1 [bzimage] Use image name in debug messages 083e273bb [efi] Add ability to reboot to firmware setup menu 7eaa2daf6 [reboot] Generalise warm reboot indicator to a flags bitmask ba2135d0f [multiboot] Remove userptr_t from Multiboot and ELF image parsing c8c5cd685 [multiboot] Use image name in Multiboot and ELF debug messages 3befb5eb5 [linux] Enable compiler warnings when building the linux_api.o object 024439f33 [linux] Add missing return statement to linux_poll() bd4ca67cf [build] Disable gcc unterminated-string-initializer warnings 15c1111c7 [build] Remove unsafe disable function wrapper from legacy NIC drivers 7741756af [build] Prevent the use of reserved words in C23 b816b816a [build] Fix old-style function definition 58e6729cb [build] Fix typo in xenver.h header guard 4c8bf666f [pnm] Remove userptr_t from PNM image parsing d29651dde [png] Remove userptr_t from PNG image parsing 76a17b098 [fbcon] Avoid redrawing unchanged characters when scrolling aa3cc56ab [fbcon] Remove userptr_t from framebuffer console drivers 4cca1cadf [efi] Remove userptr_t from EFI PE image parsing 338cebfee [pxe] Remove userptr_t from PXE file API implementation 8b3b4f245 [pxe] Remove userptr_t from PXE API call dispatcher c1b558f59 [cmdline] Remove userptr_t from "digest" command 0edbc4c08 [nbi] Remove userptr_t from NBI image parsing 3cb33435f [sdi] Remove userptr_t from SDI image parsing d7c94c4aa [pxe] Remove userptr_t from PXE NBP image parsing 2f11f466e [block] Remove userptr_t from block device abstraction 2742ed5d7 [uaccess] Remove now-obsolete memchr_user() 4f4f6c33e [script] Remove userptr_t from script image parsing 8923a216b [ucode] Remove userptr_t from microcode image parsing 605cff4c8 [ucode] Remove userptr_t from microcode update mechanism f18c1472e [thunderx] Replace uses of userptr_t with direct pointer dereferences 8ac03b4a7 [exanic] Replace uses of userptr_t with direct pointer dereferences e8ffe2cd6 [uaccess] Remove trivial uses of userptr_t 945df9b42 [gve] Replace uses of userptr_t with direct pointer dereferences 839540cb9 [umalloc] Remove userptr_t from user memory allocations 0bf0f8716 [smbios] Remove userptr_t from SMBIOS structure parsing 0b3fc48fe [acpi] Remove userptr_t from ACPI table parsing c059b3417 [deflate] Remove userptr_t from decompression code b89a34b07 [image] Remove userptr_t from image definition e98b84f1b [crypto] Remove userptr_t from CMS verification and decryption 3f8937d2f [crypto] Remove userptr_t from ASN.1 parsers 04d0b2fdf [uaccess] Remove redundant read_user() 050df80bb [uaccess] Replace real_to_user() with real_to_virt() 8c31270a2 [uaccess] Remove user_to_phys() and phys_to_user() 4535548cb [uaccess] Remove redundant user_to_virt() 89fe78868 [uaccess] Remove redundant memcpy_user() and related string functions ef0384918 [uaccess] Remove redundant userptr_add() and userptr_diff() b65f67d44 [uaccess] Change userptr_t to be a pointer type 71174e19d [uaccess] Add explicit casts to and from userptr_t where needed 63d27c631 [uaccess] Rename userptr_sub() to userptr_diff() 453acba7d [time] Use currticks() to provide the null system time 423cdbeb3 [riscv] Map DEL to backspace on the SBI debug console 1291dc39f [cgem] Add a driver for the Cadence GEM NIC 0c482060d [undi] Work around broken ASUSTeK KNPA-U16 server PXE ROM 758a50486 [efi] Inhibit calls to Shutdown() for wireless SNP devices b07cc851f [netdevice] Add the concept of an insomniac network device c88ebf2ac [efi] Allow for custom methods for disconnecting existing drivers eeec6442d [dt] Provide dt_ioremap() to map device registers 99322fd3b [fdt] Add fdt_cells() to read cell-based properties such as "reg" 2c406ec0b [netdevice] Add missing bus type identifier for devicetree devices 424839c58 [crypto] Allow for explicit control of external trust sources 37e9f785b [dt] Add basic concept of a devicetree bus d462aeb0c [fdt] Remove concept of a device tree cursor b1125007c [fdt] Add basic tests for reading values from a flattened device tree db4934617 [fdt] Avoid temporarily modifying path during path lookup c887de208 [fdt] Provide fdt_strings() to read string list properties 69af6f0c3 [fdt] Allow for trailing slashes in path lookups 96dfaa7e7 [crypto] Switch to using python-asn1crypto instead of python-asn1 7e64e9b67 [fdt] Populate boot arguments in constructed device tree d85344888 [fdt] Identify free space (if any) at end of parsed tree 0a48bb321 [x509] Ensure certificate remains valid during x509_append() a289b4b8c [tls] Support fragmentation of transmitted records f115cfcf9 [tls] Send an empty client certificate chain if we have no certificate 5818529f3 [iobuf] Limit automatic I/O buffer alignment to page size 7fe467a46 [tls] Encrypt data in place to reduce memory usage d92551a32 [xfer] Use xfer_alloc_iob() for transmit I/O buffers on stream sockets 3937c893a [isa] Disable legacy ISA device probing by default 4a7f64bf4 [efi] Allow for fact that SNP device may be removed by executed image 18dbd05ed [efi] Check correct return value from efi_pxe_find() 4bcaa3d38 [efi] Disconnect existing drivers on a per-protocol basis 7737fec5c [efi] Define an attachment priority order for EFI drivers be3322475 [efi] Show all drivers claiming support for a handle in debug messages ea5762d9d [efi] Return success from Stop() if driver is already stopped 7adce3a13 [efi] Add various well-known GUIDs encountered in WiFi boot b20f506a7 [efi] Install a device tree for the booted OS, if available 761f43ce1 [fdt] Provide the ability to create a device tree for a booted OS 666929e31 [efi] Create a copy of the system flattened device tree, if present 3860313dd [fdt] Allow for parsing device trees where the length is known in advance 2399c7998 [fdt] Allow for the existence of multiple device trees 09fbebc08 [fdt] Add the "fdt" command cfd93465e [fdt] Add the concept of an FDT image 98f86b4d0 [efi] Add support for installing EFI configuration tables f0caf90a7 [efi] Add flattened device tree header and GUID definitions ec8c5a5fb [efi] Add ACPI and SMBIOS tables as well-known GUIDs 0b606221c [undi] Ensure forward progress is made even if UNDI IRQ is stuck 4134280bc [pxeprefix] Ensure that UNDI IRQ is disabled before starting iPXE e8365f7a5 [pxeprefix] Work around missing type values from PXENV_UNDI_GET_NIC_TYPE 32a940821 [efi] Allow use of typed pointers for efi_open() et al 37897fbd4 [efi] Eliminate uses of HandleProtocol() bac318743 [efi] Use efi_open() for all ephemeral protocol opens 5a5e2a1da [efi] Use efi_open_unsafe() for all explicitly unsafe protocol opens 9dd30f11f [efi] Use efi_open_by_driver() for all by-driver protocol opens 4561a0376 [efi] Use efi_open_by_child() for all by-child protocol opens 358db1561 [efi] Create safe wrappers for OpenProtocol() and CloseProtocol() 48d168012 [efi] Remove the efipci_open() and efipci_close() wrappers 328388532 [efi] Avoid function name near-collision 331bbf507 [efi] Remove spurious close of SNP device parent's device path 8249bbc09 [efi] Use driver name only from driver binding handles in debug messages 02ecb23d1 [efi] Get veto candidate driver name via either component name protocol 756e3907f [efi] Get veto candidate driver name from image handle be5bf0aa7 [efi] Show image address range in veto debug messages 5d64469a9 [efi] Prefer driver name to device path for debug messages 7cda3dbf9 [efi] Attempt to retrieve driver name from image handle for debug messages 1a602c92a [efi] Allow wrapping the global boot services table in situ f68c8b09e [efi] Fix debug wrappers for CloseEvent() and CheckEvent() 37ea181d8 [efi] Ignore path separator characters in virtual filenames 6e4196baf [efi] Prescroll the display after a failed wrapped ExitBootServices() call 8ea8411f0 [efi] Add EFI_RNG_PROTOCOL_GUID as a well-known GUID 42a29d568 [crypto] Update cmsdetach to work with python-asn1 version 3.0.0 829e2d1f2 [rng] Restore state of IRQ 8 and PIE when disabling entropy gathering 8840de409 [pic8259] Return previous state when enabling or disabling IRQs d1133956d [contrib] Update bochsrc.txt to work with current versions ddc2d928d [efi] Accept and trust CA certificates in the TlsCaCertificates variable aa49ce5b1 [efi] Add TLS authentication header and GUID definitions 2a901a33d [efi] Add EFI_GLOBAL_VARIABLE as a well-known GUID da3024d25 [cpio] Allow for the construction of pure directories d6ee9a924 [cpio] Fix calculation of name lengths in CPIO headers 5f3ecbde5 [crypto] Support extracting certificates from EFI signature list images 26a8fed71 [crypto] Allow for parsing of DER data separate from DER images 011c778f0 [efi] Allow efi_guid_ntoa() to be used in non-EFI builds 8706ae36d [efi] Add EFI_SIGNATURE_LIST header and GUID definitions a3ede1078 [efi] Update to current EDK2 headers 32d706a9f [build] Use -fshort-wchar when building EFI host utilities 82fac5162 [efi] Mark UsbHostController.h as a non-imported header be3a78eaf [lkrnprefix] Support a longer version string 12ea8c407 [cpio] Allow for construction of parent directories as needed e7595fe88 [menu] Allow a post-activity timeout to be defined ccd620054 [crypto] Start up RBG on demand if needed b35300fc6 [efi] Increase download timeout for autoexec.ipxe 8e6b914c5 [crypto] Support direct reduction only for Montgomery constant R^2 mod N 5056e8ad9 [crypto] Expose shifted out bit from big integer shifts bd90abf48 [bnxt] Allocate TX rings with firmware input 77cc3ed10 [malloc] Ensure free memory blocks remain aligned 6f076efa6 [malloc] Clean up debug messages c85de315a [crypto] Add definitions and tests for the NIST P-384 elliptic curve bc5f3dbe3 [crypto] Add definitions and tests for the NIST P-256 elliptic curve be9ce4907 [crypto] Add support for Weierstrass elliptic curve point multiplication 66b5d1ec8 [crypto] Add a generic implementation of a Montgomery ladder c2f21a218 [test] Add generic tests for elliptic curve point multiplication c9291bc5c [tls] Allow for NIST elliptic curve point formats df7ec3176 [crypto] Generalise elliptic curve key exchange to ecdhe_key() cc38d7dd3 [crypto] Add bigint_ntoa() for transcribing big integers d88eb0a19 [crypto] Extract bigint_reduce_supremum() from bigint_mod_exp() 83ba34076 [crypto] Allow for relaxed Montgomery reduction c0cbe7c2e [efi] Add EFI_TCG2_PROTOCOL header and GUID definition 8816ddcd9 [efi] Update to current EDK2 headers 97079553b [crypto] Calculate inverse of modulus on demand in bigint_montgomery() 24db39fb2 [gve] Run startup process only while device is open 5202f8334 [crypto] Remove obsolete bigint_mod_multiply() 83ac98ce2 [crypto] Use Montgomery reduction for modular exponentiation 4f7dd7fbb [crypto] Add bigint_montgomery() to perform Montgomery reduction 96f385d7a [crypto] Use inverse size as effective size for bigint_mod_invert() 7c2e68cc8 [crypto] Eliminate temporary working space for bigint_mod_invert() 9cbf5c4f8 [crypto] Eliminate temporary working space for bigint_reduce() 167a08f08 [crypto] Expose carry flag from big integer addition and subtraction da6da6eb3 [crypto] Add bigint_msb_is_set() to clarify code e9a23a5b3 [efi] Ensure local drives are connected when attempting a SAN boot 8fc11d8a4 [build] Allow for per-architecture cross-compilation prefixes 19f44d299 [riscv] Check if seed CSR is accessible from S-mode e0e102ee2 [sbi] Add support for running as a RISC-V SBI payload 7ccd08dbf [build] Allow default platform to vary by architecture d9c0d26e1 [pci] Provide a null PCI API for platforms with no PCI bus 06a933000 [riscv] Add missing volatile qualifiers on timer and seed CSR accesses be0c9788a [riscv] Add support for the seed CSR as an entropy source cd54e7c84 [riscv] Add support for RDTIME as a timer source b0a8eabbf [riscv] Add support for checking CPU extensions reported via device tree 74710b831 [fdt] Add ability to parse unsigned integer properties cc45ca372 [pci] Drag in PCI settings mechanism only when PCI support is present abfa7c3ab [uaccess] Rename UACCESS_EFI to UACCESS_FLAT 33d80b1cd [smbios] Provide a null SMBIOS API for platforms with no concept of SMBIOS 21940425c [riscv] Add support for reboot and power off via SBI b23204b38 [riscv] Add support for the SBI debug console fa1c24d14 [crypto] Add bigint_mod_invert() to calculate inverse modulo a power of two c69f9589c [usb] Expose USB device descriptor and strings via settings c219b5d8a [usb] Add "usbscan" command for iterating over USB devices 2bf16c6ff [crypto] Separate out bigint_reduce() from bigint_mod_multiply() f78c5a763 [crypto] Use architecture-independent bigint_is_set() 7e0bf4ec5 [crypto] Rename bigint_rol()/bigint_ror() to bigint_shl()/bigint_shr() 3f4f84392 [crypto] Eliminate temporary carry space for big integer multiplication 8844a3d54 [arm] Support building as a Linux userspace binary for AArch32 e0282688c [arm] Check PMCCNTR availability before use for profiling 5f7c6bd95 [profile] Standardise return type of profile_timestamp() 3def13265 [crypto] Use constant-time big integer multiplication 59d123658 [gve] Allocate all possible event counters 9bb206863 [efi] Remove redundant EFI_BOOT_FILE definitions c215048dd [riscv] Add support for the RISC-V CPU architecture 68db9a3cb [linux] Allow a sysroot to be specified via SYSROOT=... 670810bed [efi] Use standard va_args macros instead of VA_START() etc 1d43e535f [test] Add tests for 64-bit logical and arithmetic shifts c85ad1246 [efi] Centralise definition of efi_cpu_nap() 5de5d4626 [libc] Centralise architecture-independent portions of setjmp.h a1830ff43 [cloud] Add ability to delete old AMI images 49f9e036f [cloud] Add family and architecture tags to AWS snapshots and images f88761ef4 [ena] Change reported operating system type to "iPXE" 2b8200757 [gdb] Allow CPU architectures to omit support for GDB 804f35cb5 [build] Centralise dummy architecture-specific headers c7f2e7551 [aqc1xx] Add support for Marvell AQtion Ethernet controller 7f75d320f [etherfabric] Fix use of uninitialised variable in falcon_xaui_link_ok() 301644ab4 [test] Add CMS decryption self-tests 5e69cf08d [crypto] Allow cms_decrypt() to be called on unregistered images 72316b820 [image] Add the "imgdecrypt" command 486b15b3c [crypto] Support decryption of images via CMS envelopes 49404bfea [image] Split image_strip_suffix() out from image_extract() 748cab774 [crypto] Add cmsdetach script for detaching encrypted data from CMS messages b053ba198 [test] Update CMS self-test terminology 4b4a362f0 [crypto] Allow for extraction of ASN.1 algorithm parameters bdb5b4aef [crypto] Hold CMS message as a single ASN.1 object 46937a9df [crypto] Remove the concept of a public-key algorithm reusable context acbabdb33 [tls] Group client and server state in TLS connection structure c9cac76a5 [tls] Group transmit and receive state in TLS connection structure be2784649 [gve] Add missing error codes in EUNIQ() list of potential errors ab5743efc [contrib] Remove obsolete rom-o-matic code 633f4f362 [test] Generalise public-key algorithm tests and use okx() 53f089b72 [crypto] Pass asymmetric keys as ASN.1 cursors 950f6b586 [efi] Allow discovery of PCI bus:dev.fn address ranges 7c82ff0b6 [pci] Separate permission to probe buses from bus:dev.fn range discovery 9d9465b14 [crypto] Fix debug name for empty certificate chain validators 97635eb71 [crypto] Generalise cms_signature to cms_message 998edc6ec [crypto] Add OID-identified algorithms for AES ciphers 3b4d0cb55 [crypto] Pass image as parameter to CMS functions 96fb7a0a9 [crypto] Allow passing a NULL certificate store to x509_find() et al d85590b65 [crypto] Centralise mechanisms for identifying X.509 certificates 59e2b03e6 [crypto] Extend asn1_enter() to handle partial object cursors 0e73b48f7 [crypto] Clarify ASN.1 cursor invalidation behaviour 309ac8fd2 [crypto] Do not return an error when skipping the final ASN.1 object a064d3976 [cpuid] Allow hypervisor CPUID leaves to be accessed as settings 121d96b90 [cpuid] Allow reading hypervisor CPUID leaves c117e6a48 [smbios] Allow reading an entire SMBIOS data structure as a setting 60d682409 [smbios] Avoid reading beyond end of constructed SMBIOS setting 0dc8933f6 [cloud] Add utility to read INT13CON partition in Google Compute Engine d2d194bc6 [gve] Increase number of receive buffers to reduce packet loss c7b76e3ad [gve] Add driver for Google Virtual Ethernet NIC 5a9f476d4 [cloud] Add utility for importing images to Google Compute Engine b66e27d9b [ipv6] Expose router address for DHCPv6 leased addresses 77acf6b41 [ipv4] Support small subnets with no directed broadcast address 821bb326f [hci] Remove the generalised widget user interface abstraction 162cc51b6 [form] Reimplement the "login" user interface f417f0b6a [form] Add support for dynamically created interactive forms 1c3c5e2b2 [dynui] Add concept of a secret user interface item 039019039 [dynui] Allow for multiple flags on a user interface item c8e50bb0f [dynui] Generalise mechanisms for looking up user interface items 5719cde83 [dynui] Generalise the concept of a menu to a dynamic user interface 122777f78 [hci] Allow tab key to be used to cycle through UI elements 76e0933d7 [hci] Rename "item" command's first parameter from "label" to "name" bf98eae5d [hci] Split out msg() and alert() from settings UI code bb4a10696 [hci] Draw all widgets on the standard screen e965f179e [libc] Add stpcpy() dc118c536 [hci] Provide a general concept of a text widget set d7e58c5a8 [test] Add test cases for editable strings b01781a2b [hci] Fix semantics of replace_string() to match code comments cb95b5b37 [efi] Veto the Dhcp6Dxe driver on all platforms 40b511244 [hci] Use dynamically allocated buffers for editable strings 27ecc36c0 [efi] Do not attempt to download autoexec.ipxe without a valid base URI 59f27d693 [netdevice] Add "linktype" setting 165995b7e [efi] Restructure handling of autoexec.ipxe script b940d5423 [cachedhcp] Allow cached DHCPACK to apply to temporary network devices b66f6025f [efi] Add the ability to create a temporary MNP network device b52b4a46d [efi] Allow for allocating EFI devices from arbitrary handles 764e34f15 [http] Add error table entry for HTTP 404 Not Found error afae88178 [tftp] Add error table entry for TFTP "file not found" error code 43deab89c [efi] Add error table entry for local filesystem EFI_NOT_FOUND error 19f39bc07 [efi] Report local file errors during download, rather than on opening f39b48d5f [image] Allow opaque URI component to provide image name 37850e0e8 [build] Fix build failures with random versions of gcc 9bbe77669 [efi] Extract basic network settings from loaded image device path 170bbfd48 [efi] Add efi_path_mac() to parse a MAC address from an EFI device path dcad73ca5 [efi] Add support for driving EFI_MANAGED_NETWORK_PROTOCOL devices da5188f3e [efi] Allow for drivers to be located via child handles ca483a196 [efi] Add helper functions for service binding protocols a15ce0018 [efi] Match chainloaded device by uppermost matching handle 390bce951 [efi] Set current working URI from our own device path URI, if present 1a84facf1 [efi] Add efi_path_uri() to parse a URI from an EFI device path 88c2a01e1 [settings] Expose current working URI and directory URI via settings 926816c58 [efi] Pad transmit buffer length to work around vendor driver bugs c11734eee [golan] Use ETH_HLEN for inline header size fa4bda617 [build] Fix building on older versions of gcc bac967d51 [snp] Allocate additional padding for receive buffers 17882e76a [ucode] Add support for updating x86 microcode 1344e13a0 [bios] Provide a multiprocessor API for BIOS a67f913d6 [librm] Add support for installing a startup IPI handler 89bb926a0 [efi] Provide a multiprocessor API for EFI 1ab4d3079 [mp] Define an API for multiprocessor functions df2f23e33 [efi] Update to current EDK2 headers 226531ed3 [ci] Update action versions to silence GitHub warnings 06e229590 [efi] Do not report return status from efi_block_local() 24a855f1f [block] Allow SAN boot device to be identified by filesystem label 62b6d3633 [block] Allow SAN boot device to be identified by an extra filename cea22d76e [block] Allow SAN boot device to be identified by UUID c4471e340 [efi] Add efi_path_guid() utility function 636ccb4ca [block] Allow for additional SAN boot parameters alongside filename b1c13cc43 [efi] Allow booting from local disks via the "sanboot" command 8da22a59e [block] Allow for iteration over SAN device list in drive number order 37edfea72 [efi] Generalise block device boot to support arbitrary EFI handles eb720d222 [efi] Use file system protocol to check for SAN boot filename existence 75c790448 [block] Use drive number as debug message stream ID 1b23d4de2 [efi] Use long forms of device paths in debug messages 7cd73884e [parseopt] Add parse_uuid() for parsing UUID command-line arguments 0eb8fbd0b [settings] Add parsing for UUID and GUID settings types da7b26628 [uuid] Add uuid_aton() to parse a UUID from a string 182ee9093 [efi] Work around broken boot services table manipulation by UEFI shim 43e385091 [eap] Add support for the MS-CHAPv2 authentication method 25ffcd79b [eap] Allow MD5-Challenge authentication method to be disabled 834f319f8 [eap] Add progress debug messages ee6185dcf [efi] Ignore new LoongArch PC-relative relocations and relaxations e5f3ba0ca [drivers] Sort PCI_ROM() entries numerically 582132fe3 [crypto] Force inlining of trivial wrapper functions 075292cc2 [crypto] Add implementation of MS-CHAPv2 authentication 929f06a76 [crypto] Allow for multiple cross-signed certificate download attempts 943d75b55 [crypto] Add x509_is_self_signed() helper function 3e721e0c0 [crypto] Add x509_truncate() to truncate a certificate chain e10dfe5dc [list] Add list_for_each_entry_safe_continue() 88b291d64 [list] Add list_is_head_entry() 94b39fbe9 [build] Fix build failures with older versions of gcc 0f5abd8b1 [libc] Allow build_assert() failures to be ignored via NO_WERROR=1 a846c4ccf [bnxt] Add support for BCM957608 e7ae51b0d [crypto] Add implementation of the DES cipher af4583b21 [test] Remove dummy initialisation vector for ECB-mode AES tests 36a27b22b [crypto] Fix stray references to AES 0cc0f4744 [tls] Tidy up error handling flow in tls_send_plaintext() 65d69d33d [efi] Fix hang during ExitBootServices() 963ec1c4f [tls] Add ECDHE cipher suites 8f6a9399b [tls] Make key exchange algorithms selectable via build configuration a881a2606 [crypto] Add X25519 OID-identified algorithm and TLS named curve b234226db [tls] Add support for Ephemeral Elliptic Curve Diffie-Hellman key exchange 8e2469c86 [tls] Split out Diffie-Hellman parameter signature verification 989dbe0bc [tls] Generate key material after sending ClientKeyExchange 6f70e8be8 [tls] Restructure construction of ClientHello message 17135c83f [crypto] Add an abstraction of an elliptic curve 27398f136 [crypto] Check for all-zeros result from X25519 key exchange de8a0821c [bnxt] Add support for additional chip IDs 2eea04c02 [crypto] Add X25519 key exchange algorithm 908174ec7 [loong64] Replace broken big integer arithmetic implementations bac13ba1f [crypto] Add bigint_swap() to conditionally swap big integers 13e390d54 [crypto] Add bigint_copy() as a convenient wrapper macro 26d3ef062 [crypto] Allow multiplicand and multiplier to differ in size 4b7d9a6af [libc] Replace linker_assert() with build_assert() 6d29415c8 [libc] Make static_assert() available via assert.h 6ca597eee [build] Fix building with newer binutils e66552eee [build] Remove unnecessary ".text" directives 08fcb0e8f [eap] Add support for the MD5-Challenge authentication type c6226f104 [eap] Add support for sending an EAP identity 0abb3e85e [eap] Ignore any received EAP responses 4ed7a5718 [build] Reduce scope of wildcard .gitignore rules fa6221323 [smbios] Support scanning for the 64-bit SMBIOS3 entry point 119c415ee [intel] Add PCI ID for I219-LM (23) 9e92c3989 [efi] Add potentially missing relocation types 3fc1b407d [efi] Fix Coverity warning about unintended sign extension 0958e0146 [efi] Add relocation types generated by clang 337880dea [build] Use SOURCE_DATE_EPOCH for FAT serial number if it exists f22879ca9 [efi] Allow compiling elf2efi with clang 98dd25a3b [efi] Avoid modifying PE/COFF debug filename a147245f1 [efi] Extend PE header size to cover space up to first section c3dd3168c [efi] Fix dependency list construction in EDK2 header import script b829b1750 [efi] Maximise image base address 03ff1bb99 [efi] Do not assume canonical PE section ordering 18582a05f [efi] Treat 16-bit sections as hidden in hybrid binaries 6714b20ea [efi] Place PE debug information in a hidden section b37d89db9 [efi] Fix recorded overall size of headers in NT optional header cc858acd3 [efi] Write out PE header only after writing sections b30a0987e [efi] Use load memory address as file offset for hybrid binaries 3d8a61465 [efi] Mark PE images as large address aware a9e89787d [efi] Set NXCOMPAT bit in PE header 678a60f61 [efi] Treat writable sections as data sections 8c8ead253 [efi] Update to current EDK2 headers 77b07ea4f [cloud] Add utility script to read iPXE output from INT13CON partition d8f9c221e [cloud] Add ability to overwrite existing AMI images 595b1796f [eapol] Limit number of EAPoL-Start packets transmitted per attempt 1bd01b761 [eapol] Delay EAPoL-Start while waiting for EAP to complete 5524bb983 [pci] Require discovery of a PCI device when determining usable PCI APIs 36e1a559a [pci] Check that ECAM configuration space is within reachable memory 1f3a37e34 [pci] Cache ECAM mapping errors 74ec00a9f [pci] Handle non-zero starting bus in ECAM allocations f88320313 [pci] Force completion of ECAM configuration space writes 115707c0e [iphone] Add missing va_start()/va_end() around reused argument list ff0f86048 [libc] Use wall clock time as seed for the (non-cryptographic) RNG 8b14652e5 [eapol] Send EAPoL-Start packets to trigger EAP authentication 56cc61a16 [eap] Define a supplicant model for EAP and EAPoL cac3a584d [fcoe] Use driver-private data to hold FCoE port structure 8cbf24819 [vmware] Use driver-private data to hold GuestInfo settings block 8b1d34bad [ipv6] Use driver-private data to hold link-local IPv6 settings block cc1e27e52 [lldp] Use driver-private data to hold LLDP settings block ae4e85bde [netdevice] Allocate private data for each network upper-layer driver eeb7cd56e [netdevice] Remove netdev_priv() helper function 0aa2e4ec9 [librm] Use explicit operand size when pushing a label address 9e99a55b3 [virtio] Fix implementation of vpm_ioread32() c1834f323 [dhcp] Request NTP server option d5c08f78b [ntp] Define NTP server setting c30b71ee9 [console] Restore compatibility with "--key" values in existing scripts f3036fc21 [linux] Set a default MAC address for tap devices 59d065c9a [linux] Fix error control flow in af_packet_nic_probe() 48ae5d536 [linux] Fix error control flow in tap_probe() 6701d91c5 [netdevice] Stop link block timer when device is closed b5b60ea33 [interface] Fix debug message values for temporary interfaces 824441069 [build] Inhibit more linker warnings about an implied executable stack daa9e54ab [build] Silence the "creating blib.a" message 3ef4f7e2e [console] Avoid overlap between special keys and Unicode characters cc07ed7c7 [console] Avoid overlap between remapping flags and character values 6f57d9193 [build] Use separate code segment if supported by linker e17568ad0 [build] Inhibit linker warnings about an implied executable stack 2524a6055 [build] Avoid using multiple target patterns in pattern rules 280942a92 [loong64] Add support for building EFI binaries 6d98e0ca4 [loong64] Add CPU sleeping API for EFI LoongArch64 0c67a3632 [loong64] Add I/O API for LoongArch64 c57887bfc [ioapi] Centralise definitions for dummy PIO 18af66970 [arm] Add missing arch/arm/core source directory cfe65aa82 [arm] Remove redundant inclusion of io.h ae435cb4c [efi] Process veto objects in reverse order of enumeration f8a0d1c0b [efi] Check for protocols opened by vetoed driver and image handles f0b102550 [efi] Unload vetoed drivers by image handle rather than driver handle c832580f1 [efi] Pass more detailed driver information to veto methods 9a118322a [efi] Show manufacturer in veto debug output 2689a6e77 [efi] Always poll for TX completions 4fa4052c7 [efi] Provide read-only access to EFI variables via settings mechanism 25a3d3aca [efi] Veto the VMware UefiPxeBcDxe driver 8ab9bdca4 [efi] Include protocol interface address in debug output 12776acce [efi] Add UefiPxeBcDxe module GUID 367e022b5 [efi] Add HttpBootDxe module GUID b9a60fb0b [efi] Add new IScsiDxe module GUID a64764d10 [efi] Add HTTP header and GUID definitions bc75bbaf1 [efi] Add DNS headers and GUID definitions e7adf5701 [efi] Add Ip4Config2 header and GUID definition 92ab2de3a [efi] Add IPv6 versions of existing IPv4 headers and GUID definitions 3184ff74e [efi] Update to current EDK2 headers 9cb0a4b8e [efi] Disable static assertions in EFI headers on non-EFI platforms b0093571f [crypto] Add support for PKCS#8 private key format 6a7f560e6 [efi] Implement "shim" as a dummy command on non-EFI platforms 5b4318143 [efi] Support versions of shim that perform SBAT verification d2e1601cf [efi] Separate GetMemoryMap() wrapper from shim unlocker 95b8338f0 [efi] Add "shim" command 28184b7c2 [efi] Add support for executing images via a shim 3c214f046 [efi] Add definitions for the UEFI shim lock protocol ce2200d5f [efi] Add efi_asprintf() and efi_vasprintf() c4a8d9038 [image] Generalise concept of selected image 79d85e29a [efi] Attempt to detect EFI images that fail Secure Boot verification d27cd8196 [ci] Work around Ubuntu packaging metadata issues 03eea19c1 [efi] Allow currently selected image to be opened as "grub*.efi" 0bb0aea87 [efi] Allow currently executing image to be opened via virtual filesystem f9beb20e9 [image] Allow for images to be hidden from lists of all images f93e6b712 [efi] Show original filenames in debug messages 22cc65535 [efi] Allow downloaded images to take precedence over constructed files bd1369744 [efi] Allow for sections to be excluded from the generated PE file 9fb28080d [efi] Allow elf2efi to be used for hybrid binaries 1e4c3789e [efi] Shrink size of data directory in PE header 0d04635ef [efi] Remove redundant zero padding in PE header 1d1cf74a5 [tls] Handle fragmented handshake records aa368ba52 [tls] Pass I/O buffer to received record handlers 2c6a15d2a [tls] Clean up change cipher spec record handling 09e8a1540 [efi] Claim fixed device paths by uninstalling device path protocol bf25e23d0 [intel] Add workaround for I210 reset hardware bugs 8f1c12011 [dhcp] Unregister ProxyDHCP and PXEBS settings on a successful DHCPACK 54fcb7c29 [efi] Use image name instead of pointer value in debug messages 9e1f7a365 [image] Always unregister currently executing image e51e7bbad [image] Consistently use for_each_image() to iterate over images 523788ccd [intelx] Add PCI IDs for Intel 82599 10GBASE-T NIC 96bb6ba44 [params] Allow for arbitrary HTTP request headers to be specified 33cb56cf1 [params] Rename "form parameter" to "request parameter" 60531ff6e [http] Use POST method only if the form parameter list is non-empty 04e60a278 [efi] Omit EFI_LOAD_FILE2_PROTOCOL for a zero-length initrd 471599dc7 [efi] Split out EFI_RNG_PROTOCOL as a separate entropy source 7d71cf318 [rng] Allow for entropy sources that fail during startup tests 6625e49ce [tables] Allow any lvalue to be used as a table iterator 9f17d1116 [rng] Allow entropy source to be selected at runtime 2733c4763 [iscsi] Limit maximum transfer size to MaxBurstLength cff857461 [rng] Add RDRAND as an entropy source 6a004be0c [efi] Support the initrd autodetection mechanism in newer Linux kernels cf9ad00af [efi] Fix debug message when reading from EFI virtual files 76a286530 [image] Check delimiters when parsing command-line key-value arguments 3c83843e1 [rng] Check for several functioning RTC interrupts be8ecaf80 [eisa] Check for system board presence before probing for slots 62a1d5c0f [loong64] Add initial support for LoongArch64 84cb77439 [test] Include build architecture in test suite banner bfa5262f0 [ci] Cache downloaded packages for GitHub actions ef0a6f479 [ioapi] Move PAGE_SHIFT to bits/io.h c6901792f [build] Allow for per-architecture unprefixed constant operand modifier a2bed4393 [xen] Allow for platforms that have no Xen support 7cc305f7b [efi] Enable NET_PROTO_LLDP by default dc16de320 [lldp] Add support for the Link Layer Discovery Protocol 6c0335adf [ci] Update to ubuntu-22.04 GitHub actions runner 8450fa4a7 [dhcp] Ignore DHCPNAK unless originating from the selected DHCP server 4e456d992 [efi] Do not attempt to drive PCI bridge devices d405a0bd8 [util] Add support for LoongArch64 binaries 49c13e81b [ci] Update to actions/checkout@v3 to silence GitHub warnings 8b645eea1 [xen] Update to current Xen headers 6f250be27 [efi] Allow autoexec script to be located alongside iPXE binary b6304f298 [realtek] Explicitly disable VLAN offload aa85c2918 [efi] Update to current EDK2 headers 66a2ff442 [tests] Verify ability to sleep the CPU 3bcd0d327 [dhcp] Add IANA-defined values for all current EFI client architectures 4bb521a8c [efi] Accept a command line passed to an iPXE image via LoadOptions b9be45401 [la64] Import LoongArch64 ProcessorBind.h from EDK2 headers e3d543437 [efi] Update to current EDK2 headers 137ca5d87 [efi] Mark ConsoleControl.h as a non-imported header 900379594 [efi] Remove deleted directories from EDK2 header import script 91944c634 [efi] Allow for whitespace before #include in imported EDK2 header files dac41fc4e [efi] Detect SPDX licence identifiers in imported EDK2 headers 5220bdc52 [legal] Add missing FILE_LICENCE declaration to efi_path.c 38f54fb41 [legal] Add support for the BSD-2-Clause-Patent licence 5bf8b1152 [efi] Build util/efirom as a host-only binary 2d180ce23 [tcp] Update maximum window size to 2MB 4bffe0f0d [pxe] Discard queued PXE UDP packets when under memory pressure c5426cdaa [golan] Add new PCI ID for NVIDIA BlueField-3 network device e72670ad7 [pxe] Avoid drawing menu items on bottom row of screen 68734b9a4 [efi] Bind to only the topmost instance of the SNP or NII protocols 2fef0c541 [efi] Extend efi_locate_device() to allow searching up the device path 1cd0a248c [efi] Add efi_path_prev() utility function 204d39222 [efi] Add efi_path_terminate() utility function fcfb70bfb [arm] Inhibit linker warnings about an implied executable stack c5e1f007a [arm] Use -mfloat-abi=soft only for EFI builds 9de6c45dd [arm] Use -fno-short-enums for all 32-bit ARM builds 8f59911b2 [arm] Support building as a Linux userspace binary for AArch64 2061d658b [dhcp] Simplify platform-specific client architecture definitions 2ef5f5e05 [build] Move -Ulinux to common Makefile 475c0dfa8 [linux] Centralise the linker script for Linux binaries a99e435c8 [efi] Do not rely on ProcessorBind.h when building host binaries 6b977d125 [ena] Allocate an unused Asynchronous Event Notification Queue (AENQ) 08740220b [netdevice] Ensure consistent interpretation of "netX" device name 2dcef4b7a [efi] Create VLAN autoboot device automatically f07630c74 [vlan] Support automatic VLAN device creation 5a2fa6040 [autoboot] Include VLAN tag in filter for identifying autoboot device c4c03e5be [netdevice] Allow duplicate MAC addresses 47af48012 [netdevice] Separate concept of scope ID from network device name index ab1954638 [efi] Disable receive filters to work around buggy UNDI drivers 7147532c3 [cachedhcp] Retain cached DHCPACK after startup if not already consumed 60b5532cf [cachedhcp] Include VLAN tag in filter for applying cached DHCPACK b9571ca12 [efi] Add efi_path_vlan() utility function 099e4d39b [efi] Expose efi_path_next() utility function 0f3ace92c [efi] Allow passing a NULL device path to path utility functions d879c8e4d [efi] Provide VLAN configuration protocol 5e62b4bc6 [vlan] Allow external code to identify VLAN priority as well as tag b0ded89e9 [build] Disable dangling pointer checking for GCC 54c4c1d40 [build] Disable array bounds checking for GCC 563bff472 [intel] Add PCI ID for I219-V and -LM 16,17 2ae535532 [pci] Backup and restore standard config space across PCIe FLR ca2be7e09 [pci] Allow PCI config space backup to be limited by maximum offset 688646fe6 [tls] Add GCM cipher suites f5c829b6f [tests] Verify ability to perform in-place encryption and decryption 4acded7e5 [crypto] Support in-place decryption for GCM ciphers 63fdd9b58 [tests] Verify ability to reset cipher initialisation vector 63577207a [crypto] Ensure relevant GCM cipher state is cleared by cipher_setiv() 7256a6eb2 [tls] Allow handshake digest algorithm to be specified by cipher suite 51ecc0549 [tls] Always send maximum supported version in ClientHello 54d83e92f [tls] Add support for AEAD ciphers 186306d61 [tls] Treat invalid block padding as zero length padding 634a86093 [tls] Allow for arbitrary-length initialisation vectors c453b4c28 [tls] Add MAC length as a cipher suite parameter b6eef1485 [tls] Abstract out concept of a TLS authentication header 6a360ebfd [tls] Ensure cipher alignment size is respected 30243ad73 [crypto] Add concept of cipher alignment size d1bc872a2 [tls] Formalise notions of fixed and record initialisation vectors f8565a655 [tls] Remove support for TLSv1.0 7b60a4875 [efi] Clear DMA-coherent buffers before mapping f48b01cb0 [bzimage] Fix parsing of "vga=..." when not at end of command line 8fce26730 [crypto] Add block cipher Galois/Counter mode of operation da81214ce [crypto] Add concept of authentication tag to cipher algorithms 0c383bf00 [crypto] Add concept of additional data to cipher algorithms 8e478e648 [crypto] Allow initialisation vector length to vary from cipher blocksize 52f72d298 [crypto] Expose null crypto algorithm methods for reuse 2c7824273 [tls] Add support for DHE variants of the existing cipher suites 6b2c94d3a [tls] Add support for Ephemeral Diffie-Hellman key exchange ea33ea33c [tls] Add key exchange mechanism to definition of cipher suite 80c45c5c7 [tls] Record ServerKeyExchange record, if provided 028aac99a [tls] Generate pre-master secret at point of sending ClientKeyExchange 1a7317e7d [tls] Generate master secret at point of sending ClientKeyExchange 18b861024 [crypto] Add Ephemeral Diffie-Hellman key exchange algorithm 007d3cb80 [crypto] Simplify internal HMAC API 88419b608 [test] Add HMAC self-tests 081b3eefc [ena] Assign memory BAR if left empty by BIOS 3aa6b79c8 [pci] Add minimal PCI bridge driver 649176cd6 [pci] Select PCI I/O API at runtime for cloud images 9448ac544 [bios] Allow pcibios_discover() to return an empty range be667ba94 [pci] Add support for the Enhanced Configuration Access Mechanism (ECAM) ff228f745 [pci] Generalise pci_num_bus() to pci_discover() 56b30364c [pci] Check for wraparound in callers of pci_find_next() 8fc3c26ea [pci] Allow pci_find_next() to return non-zero PCI segments 6459e3b7b [linux] Add missing PROVIDE_PCIAPI_INLINE() macros 8f5fc1614 [ipv6] Ignore SLAAC on prefixes with an incompatible prefix length bc19aeca5 [ipv6] Fix mask calculation when prefix length is not a multiple of 8 131daf1aa [test] Validate constructed IPv6 routing table entries a80124456 [ena] Increase receive ring size to 128 entries 3b81a4e25 [ena] Provide a host information page 9f81e97af [ena] Specify the unused completion queue MSI-X vector as 0xffffffff 6d2cead46 [ena] Allow for out-of-order completions 856ffe000 [ena] Limit submission queue fill level to completion queue size c5af41a6f [intelxl] Explicitly request a single queue pair for virtual functions 04879352c [intelxl] Allow for admin commands that trigger a VF reset 491c075f7 [intelxl] Negotiate virtual function API version 1.1 b52ea2084 [intelxl] Show virtual function packet statistics for debugging cad1cc6b4 [intelxl] Add driver for Intel 100 Gigabit Ethernet NICs 6871a7de7 [intelxl] Use admin queue to set port MAC address and maximum frame size 727b034f1 [intelxl] Use admin queue to get port MAC address 06467ee70 [intelxl] Defer fetching MAC address until after opening admin queue d6e36a2d7 [intelxl] Set maximum frame size to 9728 bytes as per datasheet 99242bbe2 [intelxl] Always issue "clear PXE mode" admin queue command faf26bf8b [intelxl] Allow expected admin queue command errors to be silenced f0ea19b23 [intelxl] Increase data buffer size to 4kB fb69d1400 [intelxl] Separate virtual function driver definitions c220b93f3 [intelxl] Reuse admin command descriptor and buffer for VF responses 67f8878e1 [intelxl] Handle admin events via a callback 9e46ffa92 [intelxl] Rename 8086:1889 PCI ID to "iavf" ef7066755 [intelxl] Increase receive descriptor ring size to 64 entries 9f5b9e3ab [intelxl] Negotiate API version for virtual function via admin queue b4216fa50 [intelxl] Use non-zero MSI-X vector for virtual function interrupts 1b61c2118 [intelxl] Fix invocation of intelxlvf_admin_queues() a202de385 [intelxl] Use function-level reset instead of PFGEN_CTRL.PFSWR 0965cec53 [pci] Generalise function-level reset mechanism 9dfcdc04c [intelxl] Update list of PCI IDs d8014b180 [intelxl] Include admin command response data buffer in debug output 319caeaa7 [intelxl] Identify rings consistently in debug messages 814aef68c [intelxl] Add missing padding bytes to receive queue context 725f0370f [intelxl] Fix bit width of function number in PFFUNC_RID register 5d3fad5c1 [intelxl] Fix retrieval of switch configuration via admin queue d3c8944d5 [acpi] Expose system MAC address via ${sysmac} setting d72c8fdc9 [cachedhcp] Allow cached DHCPACK to override a temporary MAC address 87f1796f1 [ecm] Treat ACPI MAC address as being a non-permanent MAC address 70995397e [cloud] Allow aws-import script to run on Python 3.6 f58b5109f [acpi] Support the "_RTXMAC_" format for ACPI-based MAC addresses 614c3f43a [acpi] Add MAC address extraction self-tests 1e1b9593e [linux] Add stub phys_to_user() implementation 27825e555 [acpi] Allow for the possibility of overriding ACPI tables at link time dd3547543 [efi] Support Unicode character output via framebuffer console ba93c9134 [fbcon] Support Unicode character output 2ff3385e0 [efi] Support Unicode character output via text console 7e9631b60 [utf8] Add UTF-8 accumulation self-tests 3cd3a7326 [utf8] Add ability to accumulate Unicode characters from UTF-8 bytes 2acdc9299 [dns] Always start DNS queries using the first configured DNS server bc5c612f7 [console] Include mappings for AltGr-Shift-<key> 304333dac [console] Support changing keyboard map at runtime 674963e2a [settings] Always process all settings applicators 11e17991d [console] Ensure that US keyboard map appears at start of linker table 252cff5e9 [xsigo] Avoid storing unused uninitialised fields in gateway address 04288974f [pci] Ensure that pci_read_config() initialises all fields 5d22307c4 [image] Do not clear current working URI when executing embedded image 419b2e71d [console] Fix definition of unreachability for remapped keys 4a37b0500 [console] Add Swedish "se" keymap 5aee6b81d [build] Avoid invoking genkeymap.py via Perl 510f9de0a [console] Ensure that all ASCII characters are reachable in all keymaps 429d4beb8 [console] Remove "az" keymap a7a79ab12 [console] Fix unreachable characters in "mt" keymap 164db2cc6 [console] Fix unreachable characters in "il" keymap c7d781929 [console] Treat dead keys as producing their ASCII equivalents e1cedbc0d [console] Support AltGr to access ASCII characters via remapping f2a59d597 [console] Centralise handling of key modifiers 871dd236d [console] Allow for named keyboard mappings 115032159 [tables] Add ability to declare static table start and end markers 0bbd89678 [console] Handle remapping of scancode 86 3f05a82fe [console] Update genkeymap to work with current databases 0979b3a11 [efi] Support keyboard remapping via the EFI console eb92ba0a4 [usb] Handle upper/lower case and Ctrl-<key> after applying remapping 468980db2 [usb] Support keyboard remapping via the native USB keyboard driver fa708015e [console] Avoid attempting to remap numeric keypad on BIOS console f51a62bc3 [console] Generalise bios_keymap() as key_remap() 64113751c [efi] Enable IMAGE_GZIP by default for AArch64 bc35b24e3 [prefix] Fix use of writable code segment on 486 and earlier CPUs 6ba671acd [efi] Attempt to fetch autoexec script via TFTP ec746c000 [efi] Allow for autoexec scripts that are not located in a filesystem e814d3390 [uri] Allow for relative URIs that include colons within the path f4f9adf61 [efi] Include Secure Boot Advanced Targeting (SBAT) metadata fbbdc3926 [build] Ensure version.%.o is always rebuilt as expected 53a5de364 [doc] Update user-visible ipxe.org URIs to use HTTPS 91c77e259 [efi] Do not align VirtualSize for .reloc and .debug sections f43c2fd69 [settings] Support formatting UUIDs as little-endian GUIDs 9062544f6 [efi] Disable EFI watchdog timer when shutting down to boot an OS 562c74e1e [efi] Run ExitBootServices shutdown hook at TPL_NOTIFY 0f4cc4b5a [build] Include EFI system partition table entry in isohybrid images a046da21a [efi] Raise TPL during driver unload entry point 3ad27fbe7 [intel] Add PCI ID for Intel X553 0x15e4 b6045a8cb [efi] Modify global system table when wrapping a loaded image 51612b6e6 [efi] Do not attempt to use console output after ExitBootServices() 236299baa [xhci] Avoid DMA during shutdown if firmware has disabled bus mastering 1844aacc8 [uri] Retain original encodings for path, query, and fragment fields 85eb961bf [xhci] Allow for permanent failure of the command mechanism f24a2794e [virtio] Update driver to use DMA API 2265a6519 [readline] Extend maximum read line length to 1024 characters 05a76acc6 [ecm] Use ACPI-provided system-specific MAC address if present 91e147213 [ecm] Expose USB vendor/device information to ecm_fetch_mac() 0cc4c42f0 [acpi] Allow for extraction of a MAC address from the DSDT/SSDT 02ec659b7 [acpi] Generalise DSDT/SSDT data extraction logic e09e1142a [efi] Record cached ProxyDHCPOFFER and PXEBSACK, if present db6310c3e [efi] Use zero for PCI vendor/device IDs when no applicable ID exists b33cc1efe [build] Fix genfsimg to work with FATDIR with space 4d180be51 [cloud] Retry DHCP aggressively in AWS EC2 c64dfff0a [efi] Match signtool expectations for file alignment 8d08300ad [libc] Allow for externally-defined LITTLE_ENDIAN and BIG_ENDIAN constants 2690f7309 [uri] Make URI schemes case-insensitive 4aa037582 [rdc] Add driver for RDC R6040 embedded NIC 5622575c5 [realtek] Work around hardware bug on RTL8211B 0688114ea [cloud] Show ifstat output after a failed boot attempt 9b6ad2d88 [peerdist] Assume that most recently discovered peer can be reused 51c88a4a6 [build] Fix building on broken versions of GNU binutils bf4ccd426 [build] Ensure build ID is deterministic 3c040ad38 [efi] Veto the Itautec Ip4ConfigDxe driver 3dd1989ac [libc] Match standard prototype for putchar() 52300ccf9 [base64] Include terminating NUL within base64 character array 92807f575 [rndis] Fix size of reserved fields 065dce8d5 [ath5k] Avoid returning uninitialised data on EEPROM read errors f3f568e38 [crypto] Add memory output constraints for big-integer inline assembly 74c54461c [build] Use SOURCE_DATE_EPOCH for isohybrid MBR ID if it exists 0d68d7151 [build] Use SOURCE_DATE_EPOCH for .iso timestamps if it exists e5f025517 [efi] Provide an "initrd.magic" file for use by UEFI kernels ef9953b71 [efi] Allow for non-image-backed virtual files bfca3db41 [cpio] Split out bzImage initrd CPIO header construction fc8bd4ba1 [x509] Use case-insensitive comparison for certificate names 661093054 [libc] Add strncasecmp() 059c4dc68 [bnxt] Use hexadecimal values in PCI_ROM entries adb2ed907 [intel] Add PCI ID for I219-V and -LM 10 to 15 d7bc9e9d6 [image] Support archive image formats independently of "imgextract" command 62f732207 [image] Propagate trust flag to extracted archive images 191f8825c [image] Allow single-member archive images to be executed transparently a6a8bb1a9 [undi] Read TSC only when profiling 05fcf1a2f [rng] Check for TSC support before using RTC entropy source 13c1abe10 [prefix] Specify i486 architecture for LZMA decompressor 866fa1ce7 [gzip] Add support for gzip archive images d093683d9 [zlib] Add support for zlib archive images 5c9c8d2b9 [image] Add "imgextract" command for extracting archive images de4f31cdc [image] Provide image_set_len() utility function 106f4c539 [cloud] Allow multiple images to be imported simultaneously 1dfc05622 [cloud] Attempt to include CPUID_SETTINGS only for x86 builds 438513f6f [cloud] Autodetect CPU architecture from AMI disk image 6dad316e6 [cloud] Use a sortable default AMI name e994237c0 [cloud] Add ability to generate Dokuwiki table of AMI images 323af9ee8 [settings] Add --timeout option to "read" command b2501dd12 [readline] Add an optional timeout to readline_history() 56f7d44fd [efi] Show ACPI address space descriptor ranges in debug messages 3efdbef2f [efi] Always map full length of coherent DMA buffer allocation e4afaa224 [build] Fix genfsimg to build ISO with long filenames 614d99eba [xen] Avoid infinite loop on allocation failure in xenstore_response() 85d179f2c [xen] Support scatter-gather to allow for jumbo frames 8ca43ccbc [int13] Do not report INT 13 extension support for emulated floppies 3ae83222c [cloud] Enable "poweroff" command in cloud images 78749542f [netdevice] Ensure driver transmit() and poll() will not be re-entered 0be8491b7 [pci] Avoid scanning nonexistent buses when using PCIAPI_DIRECT c0346dbb4 [intel] Add additional PCI device ID to table 94245624e [efi] Mark PE .reloc and .debug sections as discardable f1e9e2b06 [efi] Align EFI image sections by page size 1cc875651 [efi] Discard .pci_devlist.* sections for EFI images 1192edf39 [dhcp] Handle DHCPNAK by returning to discovery state 7c8fc2cae [linux] Fail at link time if building slirp.linux without libslirp 65bd5c05d [linux] Do not assume that stat() works on sysfs files 1c4917b6a [linux] Validate length of ACPI table read from sysfs 50d13907c [linux] Place -lslirp at end of linker search list 69ecab263 [linux] Use fstat() rather than statx() 2a2909cd1 [linux] Use generic sysfs mechanism to read SMBIOS table 681600680 [linux] Use generic sysfs mechanism to read ACPI tables 5c8a9905c [linux] Add a generic function for reading files from sysfs 976839ae4 [linux] Free cached ACPI tables on shutdown 3a5840012 [dns] Reduce debug verbosity for DNS server list 7b963310a [linux] Allow arbitrary settings to be applied to Linux devices 8055d5c48 [linux] Add missing pci_num_bus() stub 3b8aff94b [build] Fix building on older versions of gcc 2b5d3f582 [slirp] Add libslirp driver for Linux 916ebef19 [build] Allow __asmcall to be used as a type attribute c09b62797 [linux] Provide ACPI settings via /sys/firmware/acpi/tables 9776f6ece [acpi] Allow for platforms that provide ACPI tables individually d175936b7 [acpi] Eliminate redundant acpi_find_rsdt() in acpi_sx() 0956fb52c [acpi] Use a fixed colour for debug messages f309d7a7b [linux] Use host glibc system call wrappers 040cdd0c6 [linux] Add a prefix to all symbols to avoid future name collisions 16d95227a [bitops] Provide an explicit operand size for bit test instructions b76281a88 [efi] Compress EFI ROM images 900f1f98d [librm] Test for FXSAVE/FXRSTOR instruction support e63b8c330 [librm] Add missing __asmcall on init_idt() 22bb29eab [prefix] Add a generic raw image prefix 8446a439b [initrd] Allow for zero-length initrd files 4039b54ba [cloud] Do not enable serial console on EFI platforms cd3de55ea [efi] Record cached DHCPACK from loaded image's device handle, if present d562339fc [efi] Defer autoboot link-layer address and autoexec script probing e39cd79a0 [efi] Split out autoexec script portions of efi_autoboot.c 057674bb1 [pxe] Split out platform-independent portions of cachedhcp.c 19d0fab40 [ath5k] Add missing AR5K_EEPROM_READ in ath5k_eeprom_read_turbo_modes fa012dd02 [cloud] Enable IPv6 and HTTPS in cloud boot images d16535aa4 [cloud] Add utility for importing images to AWS EC2 1b99ba2a9 [build] Work around stray sections introduced by some binutils versions 83516ba7f [cloud] Use PCIAPI_DIRECT for cloud images 004924336 [ena] Switch to two-phase reset mechanism c160fb259 [build] Use .balign directive instead of .align b539e9a7e [build] Remove support for building with the Intel C compiler df16df2c8 [build] Report detailed errors when unable to find a usable mkisofs d79f504c0 [ci] Disable redundant scheduled execution of Coverity Scan 831f17f66 [ci] Disable Travis CI 1259580dd [ci] Add GitHub action for Coverity Scan eeca29a1e [ci] Add GitHub action for build testing e8393c372 [build] Work around distros that use -fcf-protection=full by default e80299c56 [build] Work around -fPIE patched versions of gcc on all architectures bfb72ec23 [build] Avoid spurious "make clean" when building for the first time 885c6d6e9 [efi] Fix erroneous comparison of a pointer against userptr_t 5bdb75c9d [contrib] Update bochsrc.txt to work with current versions 1af0fe04f [hermon] Add support for ConnectX-3 based cards 0c94659a8 [autoboot] Avoid closing and immediately reopening network device 6f1cb791e [hermon] Avoid parsing length field on completion errors 8747241b3 [hermon] Make hermon_dump_xxx() functions no-ops on non-debug builds 410566cef [hermon] Minimise reset time 7b2b35981 [hermon] Throttle debug output when sensing port type 299c671f5 [hermon] Add a debug notice when initialization is complete 8b07c88df [hermon] Add support for port management event d948ac6c6 [hermon] Adjust Ethernet work queue size e62c3e351 [hermon] Use reset value suitable for ConnectX-3 2e3d5909e [hermon] Clean up whitespace in hermon.c 79031fee2 [iscsi] Update link to iBFT reference manual def46cf34 [hermon] Limit link poll frequency in DOWN state ba20ba427 [build] Avoid using awk to format build ID as hexadecimal 3a2411b43 [build] Avoid using sha1sum when calculating build ID 82dbca493 [build] Allow BIOS linker script to be used with FreeBSD linker 1fea8ce06 [build] Check for broken elftoolchain version of objcopy fe52f8e8b [build] Avoid modifying load addresses when stripping .zinfo section d8dc06fbf [build] Replace random build ID with a deterministic one bc4979e2c [build] Use $(shell ...) to invoke BUILD_ID_CMD 9d000c9fd [build] Use SOURCE_DATE_EPOCH if it exists 6c91eebd0 [build] Use recursive deletion for "make clean" 5e260c73f [build] Avoid shell brace expansion in "make clean" f034ae59f [build] Allow elf2efi.c to build on FreeBSD 25b675c3d [build] Ensure that isolinux.bin is modifiable 9557497e7 [build] Add syslinux search locations used on FreeBSD f4fcd000a [build] Drop timestamps from .a file 43d72d008 [hermon] Perform clean MPT unmap on device shutdown 699b9f1d1 [hermon] Use Ethernet MAC as eIPoIB local EMAC 6cb12ee2b [hermon] Increase polling rate for command completions 7d32225b5 [hermon] Add event queue debug functions 7c40227e1 [hermon] Increase command timeout from 2 to 10 seconds cd126c41b [hermon] Add assorted debug error messages ce45c8dc2 [hermon] Show "issuing command" messages only at DBGLVL_EXTRA a2893dc18 [hermon] Reorganize PCI ROM list and document well-known product names 0e788c8ed [golan] Backport typo fix in nodnic_prm.h: s/HERMON/NODNIC/ 36a892a7c [arbel] Clean up whitespace in MT25218_PRM.h header 414c842f0 [hermon] Clean up whitespace in MT25408_PRM.h header a08244ecc [efi] Use EFI_SIMPLE_TEXT_INPUT_EX_PROTOCOL if available 8488c989c [image] Implicitly trust first embedded image b9de7e6ed [infiniband] Require drivers to specify the number of ports 4f9fbe6c1 [efi] Fix misleading debug message f4c3a0147 [ifmgmt] Make "ifstat" show the link-layer protocol for each netdev 42db0bd04 [cmdline] Expose "iflinkwait" as a command ade4d2b4f [efi] Fix use of uninitialised variable a3f1e8fb6 [efi] Automatically load "/autoexec.ipxe" when booted from a filesystem 989a7a803 [image] Provide image_memory() ffc41ae9d [travis] Update to current default build environment 68469d1b1 [build] Report a meaningful error message if isolinux.bin is missing 7c3d186a1 [build] Check that mkisofs equivalent supports the required options 8ef22d819 [tftp] Allow for profiling of client and server turnaround times b99477b3f [image] Add the "imgmem" command 99ac69b8a [image] Provide image_set_data() ae73fb5aa [build] Allow an initrd script to be provided via genfsimg 34f51a0dc [build] Fail gracefully when no input files are given to genfsimg 05d7591a7 [build] Use explicit disk geometry for generated FAT filesystem images a2a6618d4 [build] Fix genfsimg incompatibility with dash shell 565ca3eab [build] Set volume name "iPXE" on FAT filesystem images 117353815 [build] Allow genfsimg to be used on third party UEFI binaries 3a9621a6f [ipv6] Defer router discovery timeout while link is blocked 9a341203d [dhcp] Allow for links that remained blocked for up to three minutes 9c2e8bad1 [eap] Treat an EAP Request-Identity as indicating a blocked link 274ad6901 [eapol] Replace EAPoL code 860620459 [dhcp] Continue transmitting DHCPDISCOVER while link is blocked 0fb37a48a [build] Include xorrisofs as a viable mkisofs equivalent 8e3826aa1 [build] Inhibit spurious array bounds warning on some versions of gcc a5fb41873 [isa] Add missing #include <config/isa.h> 79c0173d6 [build] Create util/genfsimg for building filesystem-based images c42f31bc8 [xhci] Avoid false positive Coverity warning 5aa389593 [efi] Leave asynchronous USB endpoints open until device is removed 7ce3b8405 [xhci] Show meaningful error messages after command failures 017b345d5 [xhci] Fail attempts to issue concurrent commands 988d2c13c [efi] Use segment and bus number to identify PCI root bridge I/O protocol dced22d6d [smbios] Add support for the 64-bit SMBIOS3 entry point 485f8ce55 [efi] Allow for longer device paths in debug messages da491eaae [sfc] Update email addresses 68f1914aa [x509] Clarify debug message for an untrusted X.509 issuer ce841946d [golan] Add new PCI IDs 47098d7cb [efi] Allow EFI_USB_IO_PROTOCOL interfaces to be nullified and leaked 6769a7c3c [efi] Skip interface uninstallation during shutdown fb91542f2 [efi] Nullify interfaces unconditionally on error and shutdown paths f47a45ea2 [iphone] Add iPhone tethering driver f43a8f8b9 [crypto] Allow private key to be specified as a TLS connection parameter 6a8664d9e [tls] Include root of trust within definition of TLS session 3475f9162 [x509] Make root of trust a reference-counted structure e3eedb0be [efi] Avoid using potentially uninitialised driver name in veto checks 39f529349 [x509] Record root of trust used when validating a certificate 6e92d6213 [ocsp] Remove dummy OCSP certificate root be47c2c72 [http] Hide HTTP transport-layer filter implementation details 1b112e9d1 [asn1] Define ASN1_SHORT() for constructing short tagged values e4b6328c8 [asn1] Rename ASN1_OID_CURSOR to ASN1_CURSOR e33f52108 [asn1] Add constant for UTF-8 string tag 25b53afa5 [tls] Allow provision of a client certificate chain 2b6b02ee7 [tls] Use intf_insert() to add TLS to an interface 09fe2bbd3 [interface] Provide intf_insert() to insert a filter interface cb0ba2f82 [interface] Ignore any attempts to plug in the null interface b6e2ea03b [efi] Veto the HP XhciDxe Driver 63625b43e [efi] Allow vetoing of drivers that cannot be unloaded 354c252ee [efi] Provide manufacturer and driver names to all veto checking methods be49380f5 [efi] Split out dbg_efi_opener() as a standalone function 13a6d1729 [xhci] Update driver to use DMA API 6e01b74a8 [dma] Provide dma_umalloc() for allocating large DMA-coherent buffers a8442750e [efi] Avoid requesting zero-length DMA mappings a2e5cf1a3 [netdevice] Fix misleading comment on netdev_rx() 9ff61ab28 [netdevice] Do not attempt to unmap a null I/O buffer 8d337ecda [dma] Move I/O buffer DMA operations to iobuf.h 70e6e8324 [dma] Record DMA device as part of DMA mapping if needed cf12a4170 [dma] Modify DMA API to simplify calculation of medial addresses 24ef74377 [intelxl] Configure DMA mask as 64-bit 9e280aecb [intel] Configure DMA mask as 64-bit 0b5467b65 [efi] Report correct error when failing to unload a vetoed driver 1295b4acf [efi] Allow initialisation via SNP interface even while claimed 03314e8da [intelxl] Update driver to use DMA API 76a7bfe93 [intelxl] Read PCI bus:dev.fn number from PFFUNC_RID register b6eb17cbd [intelxl] Read MAC address from PRTPM_SA[HL] instead of PRTGL_SA[HL] e10a40d41 [efi] Avoid dropping below TPL as at entry to iPXE 062711f1c [intel] Use physical addresses in debug messages 810dc5d6c [realtek] Use physical addresses in debug messages fc5cf18da [efi] Use casts rather than virt_to_bus() for UNDI buffer addresses 83b8c0e21 [efi] Do not populate media header length in PXE transmit CPB 5439329c9 [intel] Update driver to use DMA API 0e2622090 [efi] Rename efi_blacklist to efi_veto 580d9b00d [realtek] Update driver to use DMA API 38a54bd3b [efi] Provide DMA operations for EFI PCI devices dda03c884 [dma] Define a DMA API to allow for non-flat device address spaces be1c87b72 [malloc] Rename malloc_dma() to malloc_phys() 36dde9b0b [efi] Retain a long-lived reference to the EFI_PCI_IO_PROTOCOL instance f560e7b70 [realtek] Reset NIC when closing interface if using legacy mode 9b25f6e5c [efi] Fall back to assuming identity mapping of MMIO address space 16873703d [efi] Avoid dragging in USB subsystem via efi_usb_path() e5e2f3fba [efi] Fix memory copy length used in efi_nullify_name2() 5b41b9a80 [efi] Nullify interfaces and leak memory on uninstallation failure 86c6c79fc [efi] Allow block devices to provide their own EFI device paths a2e44077c [infiniband] Allow SRP device to be described using an EFI device path bf051a76e [fcp] Allow Fibre Channel device to be described using an EFI device path e6f9054d1 [iscsi] Allow iSCSI device to be described using an EFI device path 334f0074b [efi] Show block device ACPI table contents only at DBGLVL_EXTRA 04cb17de5 [aoe] Allow AoE device to be described using an EFI device path 2d49ce6f0 [efi] Provide utility function to concatenate device paths 6154b1fb2 [efi] Split efi_netdev_path() out to a separate function b50ad5f09 [http] Allow HTTP connection to be described using an EFI device path f2c826179 [efi] Provide efi_uri_path() to construct a URI device path 1e8648f61 [usbblk] Allow USB block device to be described using an EFI device path 87e39a9c9 [efi] Split efi_usb_path() out to a separate function 2091288ea [efi] Define an interface operation to describe using an EFI device path 2bf0fd39c [efi] Split device path functions out to efi_path.c bcf858c56 [efi] Provide EFI_INTF_OP for EFI-only interface operations c504c1d69 [interface] Allow for the definition of an unused interface operation 49fd66a8c [build] Provide a testable platform macro alongside -DPLATFORM 6ccd5239b [ipv6] Reduce time spent waiting for router discovery 0c25daad3 [efi] Enable NET_PROTO_IPV6 by default 388d65708 [lacp] Ignore (and do not echo) trailing padding on received packets 3d4378991 [lacp] Detect and ignore erroneously looped back LACP packets 02748d0a5 [efi] Defer local download process until file has been opened 6d680bdec [usbblk] Add support for USB mass storage devices 88288407a [usb] Move usbio driver to end of USB driver list e30c26d01 [usb] Allow endpoints to be refilled to a specified upper limit ebf016608 [usb] Allow device halt to be cleared independently of host controller c70b3e04e [efi] Always enable recursion when calling ConnectController() fbb5989fd [efi] Connect controllers after loading an EFI driver eede697ec [ncm] Treat a zero divisor as indicating no alignment requirements 022014171 [efi] Fix reporting of USB supported languages array 02280dc64 [efi] Avoid integer underflow on malformed USB string descriptors 7c6fdf57e [usb] Avoid integer underflow on malformed string descriptors 7151fa3ff [efi] Allow DEBUG=efi_wrap to be used independently of a loaded image 8344803c9 [efi] Disconnect controllers before uninstalling EFI_USB_IO_PROTOCOL 8eb19a178 [usb] Show debug message on device removal 627b0ba2a [efi] Report any USB errors as EFI_USB_ERR_SYSTEM fbb776f2f [efi] Leave USB endpoint descriptors in existence until device is removed f42ba772c [usb] Reset control endpoints immediately after failure 27e886c67 [efi] Use address offset as reported by EFI_PCI_ROOT_BRIDGE_IO_PROTOCOL eecb75ba4 [pci] Update drivers to use pci_ioremap() 371af4eef [pci] Define pci_ioremap() for mapping PCI bus addresses ccfffc797 [efi] Provide a single implementation of efipci_root_close() fe6993419 [efi] Show memory map returned by wrapped calls to GetMemoryMap e08ad61bf [efi] Add debug wrappers for all boot services functions of interest 4bd064de2 [build] Fix building on older versions of gcc ef2c844d0 [efi] Attempt NII initialisation both with and without cable detection c63e61df7 [efi] Use device path to locate filesystem from which we were loaded fd47fa8fe [efi] Match EDK2 numbering for USB ports 70b1a641c [comboot] Fix stack pointer retrieval after COM32 binary returns b76052335 [efi] Check the status code from AllocatePool() a08ee6e72 [cmdline] Add "--timeout" parameter to "ifconf" command 145311c62 [intelx] Added PCI_ROM entry for Intel x553/x557-AT and x553 (SFP+) NICs afaf4272b [intel] Set INTEL_NO_PHY_RST on i218v c4d1ae0fc [intel] Add INTEL_NO_PHY_RST for I218LM 8bc85ec6f [deflate] Fix typo in comment describing length codes 8d243e65c [build] Fix a GNUism that FreeBSD's sed(1) cannot deal with ee2dc525b [wpa] Fix erroneous debug message in wpa_derive_ptk 0de5e6014 [libc] Fix memcmp() to return proper values 6ec33b8d6 [pcbios] Take alignment into account when checking for available space 45a0ca6de [pcbios] Fix "out of memory" detection when expanding bottom area cede0c5ba [libgcc] Change __divmoddi4 from int64 [unknown] to int64_t 4277942ac [build] Fix default target in sdsk image 366206517 [dns] Use all configured DNS servers a95a2eafc [xfer] Remove address family from definition of a socket opener 78ca890c3 [sfc] Add PCI ID for Solarflare SFC9120 and Solarflare SFC9140 1832f8a9b [efi] Claim SNP devices early in efi_download_start() b6eecb182 [efi] Ensure NUL byte is at lowest address within stack cookie fcdd9c098 [efi] Distribute available entropy within stack cookie f7ddda435 [libc] Add bit-rotation functions for unsigned long values 98d49e460 [efi] Avoid setting direction flag on EFI platforms 2f032c84a [libc] Provide an unoptimised generic_memcpy_reverse() d2fb317fe [crypto] Avoid temporarily setting direction flag in bigint_is_geq() 586b72373 [usb] Leave port enabled after a failed device registration f727ed8a1 [axge] Reapply USB device configuration when opening network device 0f5d23433 [xhci] Increase link state settling delay to 100ms e87760183 [usb] Avoid unnecessary calls to usb_hub_set_drvdata() 18d4be8aa [xhci] Set link state to RxDetect after disabling USB3 root hub port 761ed4365 [usb] Do not attempt to disable USB3 hub ports 8ff5babb4 [usb] Add missing usb_recycle() for completed hub interrupt transfers 5d6fb7282 [usb] Clear device endpoint halt before resetting host endpoint d5874c9f2 [axge] Handle non-gigabit link speeds 2ae5d4338 [efi] Raise TPL during driver entry point a87537d44 [efi] Detect and disable seriously broken EFI_RNG_PROTOCOL implementations decee20ec [build] Disable position-independent code for ARM64 EFI builds 8a1d66c7a [golan] Add explicit type casts for nodnic_queue_pair_type 28cf9806d [intel] Avoid spurious compiler warning on GCC 10 f982a7129 [build] Be explicit about -fcommon compiler directive 3f637d746 [ocsp] Accept SHA1 certID responses even if SHA1 is not enabled a61b27b97 [efi] Enable stack protection where possible 8830f2f35 [parseopt] Treat empty integer strings in user input as invalid 200029701 [util] Treat empty integer strings as invalid 770a7bd43 [snp] Retry initialisation if link is reported as down 7f2006a9a [crypto] Disable MD5 as an OID-identifiable algorithm by default bb74f0051 [crypto] Ensure that test code drags in required ASN.1 object identifiers bd7a5e4b9 [crypto] Allow algorithms to be included without being OID-identifiable dc785b0fb [tls] Default to supporting only TLSv1.1 or above 2dac11eb1 [tls] Allow a minimum TLS protocol version to be specified 9ee70fb95 [efi] Attempt to connect our driver directly if ConnectController fails 6a6def775 [uri] Avoid appearing to access final byte of a potentially empty string ac28bbb7e [efi] Work around UEFI specification bug in LoadImage for SAN boot 18d2162f6 [efi] Work around UEFI specification bug in LoadImage d68befef1 [png] Fix potential integer overflow ebff21a51 [bnxt] Add driver support for Broadcom NetXtreme-E Adapters bdf0e029a [efi] Disambiguate errors returned by ConnectController efc1ae5ab [int13con] Create log partition only when CONSOLE_INT13 is enabled 49319f1bc [bios] Define macros for constructing partition table entries e3ca21107 [iscsi] Eliminate variable-length stack allocation in URI parsing e2e29e7ae [iscsi] Eliminate variable-length stack allocations in CHAP handlers 446e8f14e [settings] Eliminate variable-length stack allocation 0a7432191 [slam] Allow for the possibility of IPv6 multicast addresses c5306bcfa [slam] Eliminate variable-length stack allocation 6248ac396 [infiniband] Eliminate variable-length stack allocation c625681ca [tftp] Eliminate unnecessary variable-length stack allocation 18dc73d27 [travis] Ensure that most recent tag is always available Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* fuse-overlayfs: update to v1.16Bruce Ashfield2026-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping fuse-overlayfs to version v1.16-17-g51108ae, which comprises the following commits: be604bb man: regenerate a030601 man: uniformly apply bold attributes 9da0832 man: restore hard word wrapping da57ec7 man: reformat additions from e58fb12 a1ef9a0 man: rephrase description and other parts 93b3f7e man: refactor fuse-overlayfs.1.md fe0525a Plugin test e58fb12 Manpage updates for xino and ino32_t 1f60815 st_ino needs to be unique for all inodes on a device b2e4dc1 Minor cleanups eb988de Dockerfile: use ubuntu:<LTS>-<yyyyMMdd> for reproducibility f3db78e configure.ac: new development release 9ad6545 NEWS: tag 1.16 0f7e9bb Containerfile.cross: update deps 4266f68 main: fix incorrect directory entries due to unstable iteration order 0ea1677 configure.ac: prepare new release cycle c5f3ef1 NEWS: tag 1.15 6a1040f main: lookup upperdir only for created directories d5b2cec main: fix layer lookup in make_ovl_node b88a093 main: use hash_remove instead of hash_delete ce8d185 lib: update hash module from gnulib 27cabd5 main: Allow escaped colons in directory paths b31d82f main: use parsed upper layer directory 02a3582 refactor: Remove unnecessary upperdir realpath 5e7f7d7 github: update checkout action 4761dd0 github: update uraimo action fc6a2b9 github: update upload-artifact action e1aae5a github: enable unprivileged user namespaces efb6149 Update AC_INIT to 1.15-dev 6bbd62b main: use extended override xattr 8d33894 github: update run-on-arch-action cf8269b github: update ubuntu version af77bb6 tests: bump fedora version e107b0b Remove unsupported option "lazytime" 33cb788 NEWS: tag 1.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* diod: fix build with lua 5.5 and gcc 15Bruce Ashfield2026-03-242-6/+9
| | | | | | | | | | | Bump the lua max-version check from 5.5 to 5.6 in the pkg-config patch to allow lua 5.5.0 from OE-core. Add -Wno-error=discarded-qualifiers to CFLAGS to work around gcc 15 being stricter about const qualifiers in strchr return values. The upstream code uses -Werror which makes this fatal. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* diod: update to v1.1.0Bruce Ashfield2026-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping diod to version v1.1.0-22-ga8c55f0, which comprises the following commits: 2e67f42 diodcli: drop unused variable 71aa8e9 MAINTAINERS.md: add file 4d0b2e9 diodcli: add issue reference comments 2dc8a32 libdiod: simplify qid.type initialization b8aee49 libnpfs: improve qid trace formatting c7951da libnpfs: decode dentries in Rreaddir trace de73632 libnpfs: print ... when trace buffer overflows 9cfed43 libpnfs: fix inconsistent whitespace 583f453 libnpfs: reduce protocol trace truncation b5294cb libnpfs: simplify Npsrv->logmsg() signature 43cc75a testsuite: fix allsquash mkdir test on alpine 10a39c8 testsuite: fix alpine stat -f portability 768e61d testsuite: fix umount option portability 662e24c testsuite: fix alpine compilation issue 221e0ec sharness: use doas(8) if sudo(8) is unavailable 2813a8f sharness: set SUDO to preserve environment 9029fbf diod: fix alpine AF_UNIX getnameinfo failure c2f5ede diodcli: fix alpine compilation issue c3b4602 protocol.md: fix document links 3d6b0a5 update README.md for 1.1.0 5692025 scripts: add missing debian dependency 9caed75 NEWS.md: add release notes for 1.1.0 df149d7 add script to generate release notes f63991e testsuite: fix test output typo 93d454c reorganize project metadata b2e5c85 testsuite: temporarily disable security XATTR test a7032c1 diodcli: fix compliation issue on aarch64 9597b2d git: drop check in tests/kern 840ae1c .gitignore: remove ancient paths 32117dd testsuite: drop third party tests f24b4ae testsuite: drop duplicate mode test 0ad5a8a testsuite: drop duplicate fsync test 1f53fb1 testsuite: migrate atomic create test to sharness 2ac320c testsuite: migrate create test to sharness 7514217 testsuite: migrate xattr tests to sharness 2e00434 testsuite: migrate flock tests to sharness de0f09f testsuite: drop duplicate rename test e3acbbb testsuite: migrate sgid dir test to sharness e5111ab testsuite: drop unused suppl groups test program c895daa testsuite: drop duplicate stat test c335d42 testsuite: migrate pathwalk test to sharness 1eb3281 testsuite: drop duplicate statfs test 5a3ae78 testsuite: update mount options fdc1ae5 mount.diod(8): update mount options 11fdb15 mount.diod: use access=client as the default a3b561f diod(8): add SECURITY description 30fee89 testsuite: convert POSIX ACL test to sharness f9bb613 testsuite: fix POSIX ACL test 7d3c5d6 demote diodload to an internal test program 27413d3 dioddate: drop old command 8706fac diodcli(8): add date subcommand 73def41 diodcli: add date subcommand 1bbc8b2 diodshowmount: drop old command 48f389c diodcli(8): add showmount subcommand 13e94a7 diodcli: add showmount subcommand bccd37a diodls: drop old command a3d1cbb testsuite: use diodcli ls 94c8317 diodcli(8): add ls subcommand 7a3f980 diodcli: add ls subcommand 1b5f569 diodcli(8): fix typo ddab136 diodcli(8): add man page, drop diodcat man page df54c93 diodcat: drop redundant utility d6d0413 testsuite: use diodcli read instead of diodcat c46d515 sharness: export DIOD_SOCKET in diod_start() 8c9d633 diodcli: use "ctl" as the default aname dc69a6b diodcli: add --trace option f0c0588 diodcli: use DIOD_SOCKET, if set 04618a0 diodcli: make test-only subcommands invisible b9d469f diodcli: drop sysgetattr subcommand 1e00d19 diodcli: drop sysstat subcommand 61435aa libnpclient: add NPC_TRACE flag 7b73c7e diodcli: rename from npclient test program 6e12930 scripts: update install-deps-deb.sh 916e583 diodrun: call setsid() in client fork 9c43728 libdiod: clean up inconsistent tab use d56a2ea fix typo in sharness scripts f346d9e testsuite: add self-hosting test a77bf99 drop diod.conf, auto.diod a6a077e mount.diod: rename from diodmount 6e24298 diod.spec: drop RPM spec file 385b92f testsuite: cover mount helper 09c5b5e diodmount(8): update v9fs mount options 7fab3f0 diodmount: allow more control over mount options 9f88bb2 libnpfs: fix access denied message bd947a2 diod: drop incorrect assertion 479491a libnpclient: implement npc_rename() e6962ba libnpclient: drop NPC_MULTI_RPC 9be4457 testsuite: drop old tests 2707b09 github: add new test dependencies 64b01bb testsuite: add dbench, postmark, scrub, rsync tests d4cf855 testsuite: cover v9fs + diod in multiuser mode faa533e testsuite: cover v9fs + diod in allsquash mode 4073d64 testsuite: cover v9fs + diod in runasuser mode 4370f1b testsuite: define built-in prerequisites 658e4e2 testsuite: add diodrun --socketpair c83538d testsuite: add method argument to test_under_diod c44ccd0 libnpfs: fix unallocated free error 5578a90 drop extra comment from test script f33018a mergify: disable temporary PR branches dc28dc9 ci: run tests with minimal config 23bfc25 ci: get test results on failure 5e41034 testsuite: remove old "user" test 5ba9c81 testsuite: add t0006-npclient-issues.t 242aa01 testsuite: add t0005-npclient-xattr.t a683d14 testsuite: add t0004-npclient-basic.t e43267e testsuite: add sharness test_under_diod() 6150ba0 testsuite: make tattach look like other test progs a3b5f32 testsuite: relocate tattachmt test program 18a45fb testsuite: make tflush look like other test progs 2298152 testsuite: relocate tflush test program d658828 testsuite: add npclient test program 19fb16b testsuite: add diodrun test program c600bb8 ci: allow the nobody user into home directory 3e72fe4 testsuite: add t0003-basic-multiuser.t 0f90992 testsuite: add t0002-basic-allsquash.t d3bf2a1 testsuite: add t0001-basic-runasuser.t 59a8192 testsuite: create t1000-valgrind from old test d521172 testsuite: add diod-specific helper script ad63d49 diod: add --version option 9dfac9e testsuite: add sudo prereq b530c74 testsuite: add sharness test driver 66585b0 Fix autogen if autoconf-archive > 2023.02.20 (#142) 07326e2 diod: Implement Trenameat and Tunlinkat 4aa71a2 libnpfs: Fix assert failure when receiving R-type messages b91d74b diod: Fix uint32 overflow when Tread/Twrite count > UINT32_MAX-IOHDRSZ Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* dev86: remove recipe for deleted upstream projectBruce Ashfield2026-03-246-253/+0
| | | | | | | | | The upstream repository (github.com/jbruchon/dev86) has been deleted. dev86 provided 8086 assembler tools (as86/ld86/bcc) used only for building rombios, which has been disabled in Xen in the previous commit. No other recipe depends on dev86. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: drop dev86 dependency and disable rombiosBruce Ashfield2026-03-242-1/+1
| | | | | | | | | | | | dev86 (as86/ld86/bcc) was only needed to build rombios, the legacy BIOS for HVM guests. The upstream repository (jbruchon/dev86) has been deleted from GitHub. SeaBIOS is already in DEPENDS and is the modern replacement — no Xen HVM guest uses rombios in practice. Disable rombios explicitly and remove the dev86-native dependency. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cloud-init: update to 26.1Bruce Ashfield2026-03-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cloud-init to version 26.1-7-g0052a66df, which comprises the following commits: 0052a66df fix(bsd): correct the _ROOT_TMPDIR path for *BSD system (#6794) 724e085ad fix(azure): catch import error as reportable (#6714) 5c685d629 WSL: Subprocess cmd.exe with /U to output UTF-16LE (#6717) 7132625c6 feat(util): fail early when hostname is not resolvable in is_resolvable (#6772) 4db78c97a feat(azure): introduce experimental skip_ready_report for Azure (#6771) a2209a9e1 test: apt tests need to wait_for_cloud_init on potentially slow VMs 76df57457 test: use rmadison form devscripts to determine hello pkg version 8bf356753 Release 26.1 (#6776) 36736c30e test: update hello package tested using rmadison (#6774) da854b999 test: add details about failing package status to aid in debug (#6775) 3ad28be2f test: rust-coreutils date command breaks if positional args before options (#6773) 9d8943431 ci: resolute rust-based gpg-sq rejects short GPG keyids (#6710) e8a9170bc chore: fix pytest hypothesis-jsonschema warnings (#6761) 080ddb433 chore: silence deprecation warning for strptime (#6762) dd7e41727 ci: disable daily jobs on fork branches e80c0899a ci: reorder gh actions jobs 52ef4d17d chore: silence crypt warnings 402ae54a3 test: fix pytest.raises error text warnings e171b68ab chore: make jsonschema remote retrieval explicit 656565558 test: fix mocker warnings during tests b990f8d28 chore: fix untyped-defs (#6760) 2f8566cc8 test: provide snap commands to trigger wait semaphore on jammy (#6759) bb2f6b9ef doc: fix various conventions (#6757) 180feb270 chore: move conftest to test directory (#6758) 9416e6639 doc: replace Red Hat bugzilla with Red Hat jira (#6751) e2aa5010a doc: fix YAML indentation and wording in examples (#6750) fd2f115fc ci: restrict build-package upload-artifact and test to cloud-init-base a452a6650 ci: bddeb only create symlink to cloud-init-base for testing 4e3a920ea ci: update PR actions to test questing and runs-on to ubuntu-latest (#6753) 417da89f1 ci: feature values should be read from client under test (#6738) 67d8e2375 ci: use branches inclusion instead of branches-ignore exclusion (#6741) 92a9858f7 doc: fix mermaid diagram (#6743) de5c45185 chore: remove unused pylint suppressions (#6726) 944c5c975 chore: remove unmaintained python tools (#6724) 9a3b627e9 docs: correct network-config filename in NoCloud heading (#6735) 090026a3d fix: do not write meson version twice in version.py (#6729) 961fc8490 doc: make doc hierarchy more focused (#6694) 72809f804 fix: DNS resolution performance regression during local stage (#6707) afd0c6c5e chore: pin full SHA commits for all workflows (#6711) 580b21bd3 fix(azure): round duration field in FinishReportingEvent to four decimal places (#6709) 567cfe896 ci: install missing distro-info-data dependency to test devel series resolute (#6701) 26c7d38de fix: datasource initialization order in stages (#6700) 402038314 docs: security company policy updates (#6677) 8c4c59a05 ci: add shared workflow for lxd_container integration tests 8a5234705 doc: clarify CLA check (#6692) 9c2faf8ef feat(dhcp): enable --debug option for dhcpcd (#6693) feaf14716 doc: clarify verbose language (#6688) 78f6f15ec fix: migrate from ntp client package installed from ntp to ntpsec (#6684) b7b625627 chore(stages): enable type checking (#6672) d9834a30c fix: respect SSH key options for the root user (#6585) 0686791aa fix: cloud-init clean --logs should not remove non-files (#6568) d2bf88393 fix(cloudstack): Improve domain-name DHCP lease lookup (Cloudstack) (#6554) f0659039b doc: document socket protocol change 9e6151a26 ci: retain system packages for TICS workflow due to virtualenv version errors 306d66cf6 ci: run and source pylint tox target used by TICS checkers 54a58e6d0 ci: add actionlint.yml ignores 328031893 ci: export python path to GITHUB_ENV from tox venv 5531de252 feat(lxd): add s390x virtio-ports detection for LXD (#6597) e7f970b5f test: pytestified test_cc_growpart.py (#6625) ac729abb9 ci: add reviewdog workflow lint for github actions (#6662) fb44d8d9f docs: fix broken external documentation links (#6664) f8a7c8c4c ci: fix cross-distro test failures, various maintenance (#6663) 2d4519d49 feat: support Tilaa cloud (#6658) 5803e8448 docs: fix broken documentation links (#6660) 9934bbec9 ci: typo duplicated run declaration in tics workflow (#6661) 6901be5d7 ci: quote workflow names to avoid invalid YAML (#6659) 064019ec0 test: add gh workflow for tiobe TICS static analysis reporting (#6654) 449552508 chore: type cloudinit/sources/__init__.py (#6647) 7af9d0a62 fix(ec2): check elastic NICs for metadata server first (#6651) 974646e6f feat(azure): add vm_id to KVP telemetry event keys (#6551) 4810cc646 ci: exercise TMPDIR now that it works (#6652) 7cc31f585 chore: rename workflow files for organization 6880d3497 ci: reword action and workflow names for clarity 78da9db19 ci: add Python 3.15 e02b739fc fix: Pass interface string to get_newest_lease() (#6648) b5080b987 test: Skip Azure openssl tests on non-Linux 3139e9437 test: skip Linux-specific test on non-Linux e346b5104 test: use realpath for tmp directories 4e45baa3a fix: ensure mount type is used if passed 818a261ad test: Replace 'echo -n' with 'printf' d8d5a477e test: ensure symlinks are resolved in certain tests 528a712d5 test: add a socket fixtures and mocks ec10d36d3 test: hardcode passlib usage in Azure test 45c755567 test: mock chown to account for distro grp differences 2024036f6 test: bring back fake tmpdir creation c3bf2079f test: ensure we don't actually rename ntp.conf in test 3d7b54525 fix: ensure timestamp timezone encoded correctly in status.py 1ae202766 test: ensure TMPDIR parents exist 70b8771c9 fix: don't traceback when using BSD date ec44db261 fix(azure): ensure ephemeral networking uses primary NIC (#6556) a19f958c7 chore: drop dscheck maas (#6638) fad68ab5c chore: enable type checking cloudinit/distros/__init__.py (#6646) 85c463890 chore: use curl instead of wget (#6610) 9813bb84f fix(distros/freebsd): set home_dir to /home (#6637) 07173578c chore: Remove multiple entries in spec file (#6599) 07922ae05 chore: add scheduled job for py3-fast (#6634) 3067c2561 tests: convert test_cc_rsyslog.py to pytest (#6622) 0400ac624 chore(mypy): check sysconfig now that it passes (#6635) f83187388 chore: update pin and silence a valid mypy warning (#6633) 851dc9ae0 tests: convert test_cc_power_state_change.py to pytest (#6624) b117d244b fix: install lxd snap only when snap list lxd reports absent (#6626) 5efa2c631 feat(cloudstack): fetch vm password using url_helper instead of wget (#6593) 7f84ece2a chore: sync gh workflow/shellcheck-debian-scripts.yml to main df0c1036c feat(reporting): report duration on finish events (#6552) aa1794941 feat(scaleway): add AZ and region fields to DataSourceScaleway (#6616) 0f09ed190 refactor(scaleway): remove private_ip handling (#6617) fcb98b034 chore: drop support for Python 3.8 (#6607) e6955e618 tests: skip azure ssh-keygen unittests when ssh-keygen not installed (#6612) ff1b0d217 chore: no CLA workflow on downstream ubuntu package branches (#6620) 78a748808 doc(examples): remove datasource configuration (#6609) d7bc16295 feat(raspberry-pi-os): Disable fallback netcfg + remove apt mirror cfg (#6482) 78c68f593 fix(raspberry-pi-os): adjust systemd network ordering; drop obsolete deps (#6459) a7c16dff2 chore: fix logs with too few arguments (#6591) 849fb062c docs: eliminate unnecessary information from first development page (#6566) 890756015 feat(net): render vlan, bond, bridge for v1 network state (#6538) 009c0ec1b fix(rhel): Do not override changes in disable-sshd-keygen-if-cloud-init-active.conf (#6587) 583c2ebe5 fix(ssh_util): typo in exception message (#6590) 0cb642727 docs(reference): include openstack bond change (#6581) e68bb6ea3 fix(network_state): add some missing keys to V2 key filter list (#6555) baedc33ac test(azure): run pubkey extraction and certificate parsing tests (#6572) 7c684160e fix: support bond names in network_data.json (#6546) 7b400e43b fix(schema): allow accept_ra for bond/bridge/VLAN devices (#6545) af454f257 test: convert test__init__.py from unit test to pytest (#6537) 62bc0ec17 doc(network v1): fix list of required keys for bond interfaces (#6544) 5e1d8f630 fix(oracle): handle null metadata field in oracle data source (#6549) ec1a7b023 Add retry logic to 500 errors for reprovision data (#6563) 57685d147 fix(eni.py): correct resultant dns entries in eni file (#6535) c66d5cf04 fix: distros link in README (#6574) f3975e401 Fix URL scheme in deprecation message (#6565) f63bbbfa7 test: fix bug in tmp_path used as a callable for path join operation 3d495284e test: replace unittest.skip decorators with pytest equivalents cbad4501e fix: typos in cloud-init clean --help (#6559) 3830ed665 test(sources): Convert test_openstack.py from unittest to pytest (#6530) afe32c023 test(config): Convert test_cc_mcollective.py from unittest to pytest (#6531) ef7d34807 doc: readthedocs.yaml needs to generate meson_version.py for cloud-init (#6550) 10a0af061 fix: use correct tox testenv in PR template (#6543) d65c7dfd6 feat(ca_certs): add rocky to supported distros (#6540) 9f971c472 delete openEuler in cc_rh_subscription (#6494) 9e4c9d2fd test: convert test_util.py from unit test to pytest (#6536) 0ffc297bf doc: update specific support docs for sru 979561e8b doc: migrate ubuntu_test_prerelease content into development/testing 5acf5247e test: update regex for rust-coreutils stat -c output using double quotes (#6500) 1b3625140 chore: packages SPEC files provide downstream_version instead of sed 1934004c7 chore: runtime version set by meson build artifact cloudinit.meson_versions 599c1f324 chore: update packages/brpm to avoid dependency on read-version 224eb50a3 chore: update packages/bddeb to avoid dependency on read-version a88c7002f doc: update meson build example options bde544c98 test (config): Convert test_apt_conf_v1.py from unittest to pytest (#6520) 586ff7e4d test(distros): Convert test_user_data_normalize.py from unittest to pytest (#6518) e2ed42256 test: Convert test_schema.py to pytest (#6519) 7b70ce1d0 doc: fix obvious spelling errors (#6506) 9a78efcff test(distros): Convert test_ifconfig.py from unittest to pytest (#6517) 24c395028 test(config): Convert test_cc_ca_certs.py from unittest to pytest (#6516) 9db1cc8ef test(config): Convert test_cc_spacewalk.py from unittest to pytest (#6515) eb43d8e2d fix: Fix misspelled domain in landscape.canonical.com 1c44cffd8 test: Convert test_alpine.py from unittest to pytest (#6514) bc966042d test(distros): Convert test_sysconfig.py from unittest to pytest (#6510) c64fce382 test(distros): Convert test_hostname.py from unittest to pytest (#6511) 92421c1dd test(sources): Convert test_common.py from unittest to pytest (#6512) 28f011422 feat(cc_raspberry_pi): Replace rpi-connect with usb-gadget support (#6466) 94f533587 fix(raspberry-pi-os): keymap handling on Trixie-based images (#6483) e2715ef78 test: Convert test_resolv.py from unittest to pytest (#6504) c6a1d1f15 docs(cc_raspberry_pi): Better phrasing of config descriptions (#6488) 83defe9e7 fix: install doc files that were previously installed pre-Meson (#6501) 25e94e7c4 test: add regex to cope with stat link output double/single quotes (#6497) da47f5f21 feat(bsd): add FreeBSD support to Meson build (#6458) eb2a559b7 docs(cc_timezone): Replace US/Eastern with America/New_York (#6496) 743d1920a fix: Fix typos again (#6490) cb12e00e2 Release 25.3 (#6486) 89c956c8c feat(CI): new workflow to shellcheck debian package scripts (#6371) 69521d03f chore(cc_rh_subscription): deprecate hyphenated fields, remove self.log (#6470) 10a5fdc52 feat(eni): support "ip route" if available instead of "route" (#6460) 016abc02a test(distros): Convert test_hosts.py from unittest to pytest (#6481) 4c094b490 fix: preserve special permission bits (#6467) 41c8ae128 test: Convert test_registry.py from unittest to pytest (#6479) 1b0cb0b85 test: fix integration for PROPOSED to run apt update prior to install (#6477) b04c475f3 feat(schema): add support for the not keyword (#6469) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libibverbs: remove obsolete recipeBruce Ashfield2026-03-241-34/+0
| | | | | | | | | libibverbs has been superseded by rdma-core in OE-core since 2017. The only consumer was ceph, which builds with -DWITH_RDMA=OFF making the dependency unnecessary. Remove the recipe and its vruntime bbmask entry. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: update to v20.3.0 [BROKEN: cmake 4.2 configure hang]Bruce Ashfield2026-03-244-39/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | Update ceph to v20.3.0 with the following changes: - Update SRCREV to c1f7de9e4e6e92622aaff0d2173c65f83bb56e2e - Update LICENSE to add BSL-1.0 and Zlib (new upstream deps) - Refresh 0001-delete-install-layout-deb.patch for changed context - Drop 0001-cepth-node-proxy-specify-entrypoint-executable.patch (applied upstream) - Add -DWITH_CATCH2=OFF (new, uses CPM to download at configure time) - Add -DWITH_BREAKPAD=OFF (new, uses ExternalProject_Add) - Use ${PYTHON_BASEVERSION} instead of hardcoded python version - Remove libibverbs from DEPENDS (RDMA is disabled) - Add CMP0167 patch to use FindBoost instead of Boost cmake config - Symlink CMakeConfigureLog.yaml to /dev/null to prevent 100GB+ logs KNOWN BROKEN: cmake 4.2 hangs indefinitely during configure after processing src/extblkdev. The cmake process spins at 99% CPU with 28MB RSS, never producing CMakeCache.txt. This appears to be a cmake 4.2 regression with large projects (567 CMakeLists.txt files). The hang is not Boost-related (FindBoost completes successfully) and occurs with both Ninja and Unix Makefiles generators. Needs investigation at the cmake/OE-core level. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to RELEASE-4.21.0 -tipBruce Ashfield2026-03-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes the build against the lastest glibc, and we get a few other bug fixes as well: 1c72306b1f domain: move vmtrace_alloc_buffer() invocation in vcpu_create() 999c6fadf7 vpci/msix: check for BARs enabled in vpci_make_msix_hole 8f3b637591 x86/ucode: Support discrete modules being CPIO archives 805e2b8ada x86/pv: Don't assume that INT $imm8 instructions are two bytes long 93614ffa48 x86/MCE: restore CPU vendor reporting to the outside world e10f3ad869 tools/ocaml: fix 32-bit truncation bug in stub_xc_domain_setmaxmem() 1879637505 tools/sd-notify.h: Include string.h too 76dc2d6071 systemd: fall back to default system-sleep dir without systemd-devel 52356ca655 xenstored: Add newline to error message 4a7d2f18e5 libxl: constify some local variables for building with glibc 2.43 8061625411 tools/xenstored: fix live update 6adc1004f7 libxl: Fix device_add QMP calls with QEMU 9.2 and newer 55bb6db081 xen/cpufreq: fix usages of align_timer() in the on-demand governor ae0708e940 xen/cpufreq: fix adjusting of sampling window on early exit 4778574053 common/domctl: xsm update for get_domain_state access 615199f05b VT-d: fix off-by-one when handling extra RMRR ranges a7380f1437 xen: add non-executable stack note uniformly 14db25be36 xen/x86: fix usage of [[:blank:]] with BSD grep 99bd17462d EFI: Fix relocating ESRT for dom0 afaf4e7b50 SUPPORT.md: extend "lifetime" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: update to RELEASE-4.21.0 -tipBruce Ashfield2026-03-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.21.0-61-g1c72306b1f, which comprises the following commits: 1c72306b1f domain: move vmtrace_alloc_buffer() invocation in vcpu_create() 999c6fadf7 vpci/msix: check for BARs enabled in vpci_make_msix_hole 8f3b637591 x86/ucode: Support discrete modules being CPIO archives 805e2b8ada x86/pv: Don't assume that INT $imm8 instructions are two bytes long 93614ffa48 x86/MCE: restore CPU vendor reporting to the outside world e10f3ad869 tools/ocaml: fix 32-bit truncation bug in stub_xc_domain_setmaxmem() 1879637505 tools/sd-notify.h: Include string.h too 76dc2d6071 systemd: fall back to default system-sleep dir without systemd-devel 52356ca655 xenstored: Add newline to error message 4a7d2f18e5 libxl: constify some local variables for building with glibc 2.43 8061625411 tools/xenstored: fix live update 6adc1004f7 libxl: Fix device_add QMP calls with QEMU 9.2 and newer 55bb6db081 xen/cpufreq: fix usages of align_timer() in the on-demand governor ae0708e940 xen/cpufreq: fix adjusting of sampling window on early exit 4778574053 common/domctl: xsm update for get_domain_state access 615199f05b VT-d: fix off-by-one when handling extra RMRR ranges a7380f1437 xen: add non-executable stack note uniformly 14db25be36 xen/x86: fix usage of [[:blank:]] with BSD grep 99bd17462d EFI: Fix relocating ESRT for dom0 afaf4e7b50 SUPPORT.md: extend "lifetime" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-registry: use FEATURE_PACKAGES for IMAGE_FEATURES validationBruce Ashfield2026-03-121-2/+1
| | | | | | | | | | | | | | | Move FEATURE_PACKAGES_container-registry from container-image-host.bb to meta-virt-container.inc so it is available to all image recipes. image.bbclass check_image_features() auto-discovers FEATURE_PACKAGES_* variables as valid image features (line 72), so defining the variable globally is sufficient — no IMAGE_FEATURES[validitems] needed. This avoids the signature pollution that IMAGE_FEATURES[validitems] causes when set globally, while allowing container-registry to be used as an IMAGE_FEATURES value in any image recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cockpit-machines: fix source specification and conditionally skipBruce Ashfield2026-03-111-1/+4
| | | | | | | | | | | | | | | This recipe can't be built without the main recipe, which is in meta-oe meta-webserver. Fix a S assigment, so it'll parse And then skip if meta-webserver isn't in bblayers (not in collections). This will ensure that world builds don't try and pick it up when processing meta-virt. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* example-xen-guest-bundle: require xen and x11 in DISTRO_FEATURESMartin Jansa2026-03-101-1/+4
| | | | | | | | | | | | to match the image recipe from XEN_GUEST_BUNDLES Fixes: ERROR: Nothing PROVIDES 'xen-guest-image-minimal' xen-guest-image-minimal was skipped: using DISTRO 'distro', which is missing required DISTRO_FEATURES: 'xen' in bitbake world builds Signed-off-by: Martin Jansa <martin.jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen/4.21: fix arm64 build with the most recent binutilsBruce Ashfield2026-03-033-0/+110
| | | | | | | | | The upgrade of binutils in OE core broke the xen build on arm64 due to unsupported instructions. We cherry-pick a patch from xen master to fix the issue. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: update to RELEASE-4.21.0 -tipBruce Ashfield2026-03-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.21.0-42-gafaf4e7b50, which comprises the following commits: afaf4e7b50 SUPPORT.md: extend "lifetime" 056103e7ad xen: Use MFLAGS for silent-mode detection 867b7d3f97 xen/kexec: return error code for unknown hypercalls d2a6413550 x86/domain: adjust limitation on shared_info allocation below 4G 6228ea8acd xen/mm: allow deferred scrub of physmap populate allocated pages 15cd2b8f1b xen/mm: remove aliasing of PGC_need_scrub over PGC_allocated 39c90c8dee PCI: handle PCI->PCIe bridges as well in free_pdev() 74b26c53d3 x86/EFI: correct symbol table generation with older GNU ld 3f4bf1e876 x86/amd: Fold another DE_CFG edit into amd_init_de_cfg() 8d7a0f8661 build/non-x86: fix symbol lookup in presence of build-id 25db82b062 symbols: don't omit "end" symbols upon mixed code / data aliases fc024ebf24 symbols: ensure sorting by value yields reproducible outcome b75f39c692 flask: fix gcov build with gcc14+ 8cb60ba236 PCI: handle PCI->PCIe bridges as well in alloc_pdev() 4e3c9c2eca x86/CPU: extend is_forced_cpu_cap()'s "reach" b3f59203a5 x86/time: deal with negative deltas in get_s_time_fixed() bc63b09ecc xen/domain: Disallow XENMEM_claim_pages on dying domains 97593f78ea symbols: don't use symbols-dummy ee66c42166 symbols: re-number intermediate files 3146587dbc x86/spec-ctrl: Fix incomplete IBPB flushing during context switch 41b9ae5d7e x86/shadow: don't overrun trace_emul_write_val 2872cd3121 cirrus-ci: introduce FreeBSD 15.0-RELEASE as "current" version c692a6786b x86: fix incorrect return value for has_if_pschange_mc fe0d896902 x86/PVH: mark pvh_setup_mmcfg() __init 82fe260552 xen/mm: move adjustment of claimed pages counters on allocation b579e832de x86/hvm: be more strict with XENMAPSPACE_gmfn source types e39831f590 xen/mm: reject XENMEM_claim_pages when using LLC coloring f805b61268 x86/AMD: avoid REP MOVSB for Zen3/4 11f9427100 vPCI: avoid bogus "overlap in extended cap list" warnings 7ab1f4939a xen/x86: Pass TPM ACPI table to PVH dom0 1cacccbace x86/mm: update log-dirty bitmap when manipulating P2M 7990330478 x86/pod: fix decrease_reservation() clearing of M2P entries 16e22efbde x86/amd: Fix race editing DE_CFG 81e71ef34f x86/amd: Stop updating the Zenbleed mitigation dynamically ba9142efd7 x86/vhpet: Fix sanitization of legacy IRQ route 747d10b76f x86/msix: fix incorrect refcount decrease in msixtlb c7e69564e5 x86/ucode: Fix error handling during parallel ucode load 5d002b7470 x86emul/test: correct compiler checking and avoid it when merely cleaning 6adf28094f xen: Fix EFI buildid alignment 653a3dd92a x86emul/test: extend cleaning of generated files 3d966b5f13 kconfig: remove references to docs/misc/kconfig{,-language}.txt files 14ad692e3b update Xen version to 4.21.1-pre 06af9ef229 Update to Xen 4.21 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update to RELEASE-4.21.0 -tipBruce Ashfield2026-03-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping xen to version RELEASE-4.21.0-42-gafaf4e7b50, which comprises the following commits: afaf4e7b50 SUPPORT.md: extend "lifetime" 056103e7ad xen: Use MFLAGS for silent-mode detection 867b7d3f97 xen/kexec: return error code for unknown hypercalls d2a6413550 x86/domain: adjust limitation on shared_info allocation below 4G 6228ea8acd xen/mm: allow deferred scrub of physmap populate allocated pages 15cd2b8f1b xen/mm: remove aliasing of PGC_need_scrub over PGC_allocated 39c90c8dee PCI: handle PCI->PCIe bridges as well in free_pdev() 74b26c53d3 x86/EFI: correct symbol table generation with older GNU ld 3f4bf1e876 x86/amd: Fold another DE_CFG edit into amd_init_de_cfg() 8d7a0f8661 build/non-x86: fix symbol lookup in presence of build-id 25db82b062 symbols: don't omit "end" symbols upon mixed code / data aliases fc024ebf24 symbols: ensure sorting by value yields reproducible outcome b75f39c692 flask: fix gcov build with gcc14+ 8cb60ba236 PCI: handle PCI->PCIe bridges as well in alloc_pdev() 4e3c9c2eca x86/CPU: extend is_forced_cpu_cap()'s "reach" b3f59203a5 x86/time: deal with negative deltas in get_s_time_fixed() bc63b09ecc xen/domain: Disallow XENMEM_claim_pages on dying domains 97593f78ea symbols: don't use symbols-dummy ee66c42166 symbols: re-number intermediate files 3146587dbc x86/spec-ctrl: Fix incomplete IBPB flushing during context switch 41b9ae5d7e x86/shadow: don't overrun trace_emul_write_val 2872cd3121 cirrus-ci: introduce FreeBSD 15.0-RELEASE as "current" version c692a6786b x86: fix incorrect return value for has_if_pschange_mc fe0d896902 x86/PVH: mark pvh_setup_mmcfg() __init 82fe260552 xen/mm: move adjustment of claimed pages counters on allocation b579e832de x86/hvm: be more strict with XENMAPSPACE_gmfn source types e39831f590 xen/mm: reject XENMEM_claim_pages when using LLC coloring f805b61268 x86/AMD: avoid REP MOVSB for Zen3/4 11f9427100 vPCI: avoid bogus "overlap in extended cap list" warnings 7ab1f4939a xen/x86: Pass TPM ACPI table to PVH dom0 1cacccbace x86/mm: update log-dirty bitmap when manipulating P2M 7990330478 x86/pod: fix decrease_reservation() clearing of M2P entries 16e22efbde x86/amd: Fix race editing DE_CFG 81e71ef34f x86/amd: Stop updating the Zenbleed mitigation dynamically ba9142efd7 x86/vhpet: Fix sanitization of legacy IRQ route 747d10b76f x86/msix: fix incorrect refcount decrease in msixtlb c7e69564e5 x86/ucode: Fix error handling during parallel ucode load 5d002b7470 x86emul/test: correct compiler checking and avoid it when merely cleaning 6adf28094f xen: Fix EFI buildid alignment 653a3dd92a x86emul/test: extend cleaning of generated files 3d966b5f13 kconfig: remove references to docs/misc/kconfig{,-language}.txt files 14ad692e3b update Xen version to 4.21.1-pre 06af9ef229 Update to Xen 4.21 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update documentation with vxn/containerd integration and runtime testsBruce Ashfield2026-02-261-1/+92
| | | | | | | | | | | | | | | | README-xen.md: - Add vxn and containerd integration section describing all execution paths (containerd, vxn standalone, vdkr/vpdmn, native Docker/Podman) - Add memory requirements section explaining QB_MEM_VALUE=1024 is insufficient for vxn/vctr and documenting qemuparams="-m 4096" - Add runtime tests section with build prerequisites, test commands, and skip behavior - Fix x86-64 runqemu command to include qemuparams="-m 4096" vxn/README.md: - Add testing section referencing the pytest runtime test suite Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: add configuration tests and update documentationBruce Ashfield2026-02-261-0/+35
| | | | | | | | | | | | | Add TestXenImageMinimalX86Config test class verifying: - QB_CPU_KVM host passthrough for Xen CPUID filtering - QB_MEM_VALUE override (not QB_MEM which can't override bbclass) - dom0_mem in both QB_XEN_CMDLINE_EXTRA and WKS syslinux config - vgabios SAVANNAH_GNU_MIRROR usage Update Alpine recipe tests for per-arch checksums (name=${ALPINE_ARCH}) and S variable. Add qemux86-64 build and boot section to README-xen.md. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: fix x86-64 boot and guest bundling issuesBruce Ashfield2026-02-263-5/+14
| | | | | | | | | | | | | | | | | | Fix several issues found during x86-64 Xen testing: - xen-image-minimal: use -cpu host for KVM to avoid Xen CPUID filtering stripping AVX/AVX2 from x86-64-v3 builds, causing illegal instruction crashes in Dom0 - xen-image-minimal: use QB_MEM_VALUE (not QB_MEM) to properly override the hard assignment in qemuboot-xen-defaults.bbclass - xen-image-minimal: set dom0_mem=512M via QB_XEN_CMDLINE_EXTRA - qemuboot-xen-x86-64.cfg: add dom0_mem=512M to static syslinux config so guest autostart has memory available - vgabios: use ${SAVANNAH_GNU_MIRROR} for reliable downloads - alpine-xen-guest-bundle: add per-architecture checksums for aarch64 and x86_64 tarballs, fix S variable warning Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: add guest bundling infrastructure with cross-install classBruce Ashfield2026-02-262-25/+55
| | | | | | | | | | | | | Add xen-guest-cross-install.bbclass for bundling Xen guest images into Dom0 host images at build time. Supports per-guest configuration via varflags (memory, vcpus, vif, kernel extra), custom config files, external/pre-built guests, and autostart via /etc/xen/auto/ symlinks. Also add example-xen-guest-bundle recipe as a template, and simplify xen-guest-image-minimal by removing the old XEN_GUEST_AUTO_BUNDLE do_deploy mechanism in favor of the new class-based approach. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* vxn: add containerd OCI runtime integrationBruce Ashfield2026-02-261-163/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | Add shell-based OCI runtime (vxn-oci-runtime) that enables containerd to manage Xen DomU containers through the standard runc shim. Non-terminal container output flows back to ctr via the shim's pipe mechanism. New files: - vxn-oci-runtime: OCI runtime (create/start/state/kill/delete/features/logs) - vxn-sendtty.c: SCM_RIGHTS helper for terminal mode PTY passing - containerd-shim-vxn-v2: PATH trick wrapper for runc shim coexistence - containerd-config-vxn.toml: CRI config (vxn default, runc fallback) - vctr: convenience wrapper injecting --runtime io.containerd.vxn.v2 Key design: - Monitor subprocess uses wait on xl console (not sleep-polling) for instant reaction when domain dies, then extracts output markers and writes to stdout (shim pipe -> containerd FIFO -> ctr client) - cmd_state checks monitor PID liveness (not domain status) to prevent premature cleanup race that killed monitor before output - cmd_delete always destroys remnant domains (no --force needed) - Coexists with runc: /usr/libexec/vxn/shim/runc symlink + PATH trick Verified: vctr run --rm, vctr run -d, vxn standalone, vxn daemon mode. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: document guest import system and add testsBruce Ashfield2026-02-261-95/+129
| | | | | | | | | | | | Add 3rd-party guest import section to README-xen.md covering import types, kernel modes, Alpine example, and how to add custom import handlers. Add test_xen_guest_bundle.py with 46 pytest tests covering bbclass structure, import handlers, kernel modes, license warning, Alpine recipe, and README content. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* alpine-xen-guest-bundle: new recipe for Alpine Linux Xen guestBruce Ashfield2026-02-261-0/+43
| | | | | | | | | | | | Fetches Alpine Linux 3.23 minirootfs tarball and uses the xen-guest-bundle import system (rootfs_dir type) to create a 128MB ext4 disk image. Packages as an autostarting PV guest using the shared host kernel. Install into a Dom0 image with: IMAGE_INSTALL:append:pn-xen-image-minimal = " alpine-xen-guest-bundle" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: Fix QA error when sysvinit is usedYiding Liu (Fujitsu)2026-02-231-2/+1
| | | | | | | | | | | | | | | | | | irqbalance: correct to install /etc/default for sysvinit 1.This commit uses option --with-pkgconfdir for sysvinit to correct to install /etc/default Without this fix, there will show do_package QA Issue when sysvinit is used ERROR: irqbalance-1.9.4+git-r0 do_package: QA Issue: irqbalance: Files/directories were installed but not shipped in any package: /usr/etc /usr/etc/default /usr/etc/default/irqbalance.env Previous PACKAGECONFIG[systemd] only works when systemd is used. So making this patch to fix it. 2.Merge DEPENDS for systemd into PACKAGECONFIG[systemd] Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen-tools: allow empty libxenmanage package for pre-4.21Bruce Ashfield2026-02-111-0/+2
| | | | | | | | | | | | libxenmanage was introduced in Xen 4.21, but its packaging was added to the shared xen-tools.inc. When building older versions (e.g. 4.20), the library is not produced and the empty package breaks the hard RDEPENDS from xen-tools, causing do_rootfs failures. Add ALLOW_EMPTY following the existing pattern used for other version/arch-conditional packages in this file. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-yocto-builder: add Yocto build container with systemdBruce Ashfield2026-02-103-0/+108
| | | | | | | | | Multi-layer OCI container image that can compile the Yocto Project. Three layers: systemd-base, build-tools, yocto-extras. Features CROPS-style dynamic user creation matching /workdir volume owner UID/GID. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-systemd-base: replace ROOTFS_POSTPROCESS_COMMAND with packageBruce Ashfield2026-02-103-46/+35
| | | | | | | | | | | Factor systemd service masking into container-systemd-config package that installs mask symlinks via do_install. This replaces the ROOTFS_POSTPROCESS_COMMAND approach which is ignored in multi-layer OCI mode. The mask list is customizable via CONTAINER_SYSTEMD_MASK variable. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-bundles: add multilayer container bundle recipeBruce Ashfield2026-02-091-0/+27
| | | | | | | | | | Add demo recipe that bundles app-container-multilayer to demonstrate multi-layer OCI images with container-cross-install. Usage: IMAGE_INSTALL:append:pn-container-image-host = " multilayer-container-bundle" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-registry: add local OCI registry infrastructureBruce Ashfield2026-02-091-0/+8
| | | | | | | | | | | Add container registry support for Yocto container workflows: - container-registry.bbclass with helper functions - container-registry-index.bb generates helper script with baked paths - docker-registry-config.bb for Docker daemon on targets - container-oci-registry-config.bb for Podman/Skopeo/Buildah targets - IMAGE_FEATURES container-registry for easy target configuration Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-cross-install: add bbclass for bundling containers into imagesBruce Ashfield2026-02-091-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This class enables bundling pre-built OCI containers into Yocto images at build time. It uses vdkr/vpdmn to process containers via QEMU, producing properly formatted storage that can be merged into the target rootfs. Two mechanisms for bundling containers: 1. BUNDLED_CONTAINERS variable (direct specification): - Set in local.conf or image recipe - Format: "name:runtime[:autostart][:external]" - Dependencies auto-generated at parse time - Example: BUNDLED_CONTAINERS = "container-base:docker:autostart" 2. container-bundle packages (package-based): - Recipes inherit container-bundle.bbclass to create packages - Installing packages via IMAGE_INSTALL triggers processing - merge_installed_bundles() scans installed OCI directories - Runs vrunner once in batch-import mode for efficiency Automatic dependency generation for BUNDLED_CONTAINERS: - Parses entries at recipe parse time via python __anonymous() - Derives recipe name from OCI dir names (strips -latest-oci/-oci suffix) - Generates do_rootfs[depends] on recipe:do_image_complete - Use :external tag to skip dependency for third-party blobs - Single "bitbake container-image-host" builds containers + image Usage in image recipe: inherit container-cross-install Features: - Automatic detection of target architecture - Support for both Docker and Podman runtimes - Batch import mode for efficiency with multiple containers - Autostart support via systemd services (Docker) or Quadlet (Podman) - Integration with vrunner for QEMU-based processing - Backwards compatible with legacy -latest-oci naming convention The class processes containers during do_rootfs and merges the resulting storage into /var/lib/docker or /var/lib/containers. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-bundle: add package-based container bundling supportBruce Ashfield2026-02-092-0/+118
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This class creates installable packages that bundle pre-processed container images. When installed via IMAGE_INSTALL, containers are automatically merged into the target image's container storage. Component relationships for bundling a local container: 1. Application Recipe (builds the software) recipes-demo/myapp/myapp_1.0.bb - Compiles application binaries - Creates installable package (myapp) 2. Container Image Recipe (creates OCI image containing the app) recipes-demo/images/myapp-container.bb - inherit image image-oci - IMAGE_INSTALL = "myapp" - Produces: ${DEPLOY_DIR_IMAGE}/myapp-container-latest-oci/ 3. Bundle Recipe (packages container images for deployment) recipes-demo/bundles/my-bundle_1.0.bb - inherit container-bundle - CONTAINER_BUNDLES = "myapp-container:autostart" - Creates installable package with OCI data Flow: application recipe -> container image recipe -> bundle recipe -> IMAGE_INSTALL in host image -> container deployed on target Usage: inherit container-bundle CONTAINER_BUNDLES = "myapp-container:autostart redis-container" CONTAINER_BUNDLES format: source[:autostart-policy] - source: Container IMAGE recipe name or remote registry URL - autostart-policy: Optional (autostart, always, unless-stopped, on-failure) Features: - Auto-generates dependencies on container image recipes (do_image_complete) - Supports remote containers via skopeo (requires CONTAINER_DIGESTS) - Runtime auto-detected from CONTAINER_PROFILE (docker/podman) - Produces OCI directories and metadata for container-cross-install Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cockpit-machines: add recipePaul Le Guen de Kerneizon2026-01-061-0/+31
| | | | | | | | | | | | | `cockpit-machines` is a Cockpit plugin used to provide a web interface to manage virtual machines. Since Cockpit version 242, cockpit-machines has been moved to a dedicated repository. This package is dependent on cockpit package from meta-webserver layer. To test it, access the cockpit-machines UI on the tested target at `https://127.0.0.1:9090/machines`. Signed-off-by: Paul Le Guen de Kerneizon <paul.leguendekerneizon@savoirfairelinux.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: correct to install /etc/default for systemdhongxu2026-01-061-3/+1
| | | | | | | | | | | | | | Due to upstream commit [Properly embed EnvironmentFile sourced systemd configs into meson and autonconf][1], introduced 2 configurable directories, defaults set to: /usr/etc/default. This commit uses option --with-pkgconfdir to correct to install /etc/default for systemd as usual [1] https://github.com/Irqbalance/irqbalance/commit/41cb97c714e6216ab7f10f8aaa51a2548da3acc7 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* rootlesskit: regenerate go-mod/shallow/hybridBruce Ashfield2026-01-043-406/+302
| | | | | | | | | There were some issues with hyrid vcs mode and shallow clones. The tools have been updated to deal with those issues, so we regenerate to pick them up. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: update to v10.10.0Bruce Ashfield2025-12-152-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libvirt to version v11.10.0-35-g2df30bca10, which comprises the following commits: 2df30bca10 tests: add capabilities for QEMU v10.1.0 on s390x c9f45792b7 virfiletest: Fix build on non-Linux eedf9ed68b util: Rework virFileIsSharedFSOverride using virFileCheckParents 3a44f0c23d util: Fix race condition in virFileIsSharedFSOverride b6addd42be util: Fix race condition in virFileIsSharedFSType 121d179e06 tests: Test virFileIsSharedFSOverride 5ca7d3227d qemuMigrationParamsForSave: Don't take opaque 'flags' 61ae36fa0b qemuMigrationSrcToFile: Don't cross-contaminate 'flags' variable 4469a61553 virsh: Add completer for '--image-format' option of 'save' command 1e2a71be0f include: Create constants for save image format values 22c5ce995b qemu: conf: Use proper type for (save|dump|snapshot)ImageFormat cad980c83f qemu: Use 'virQEMUSaveFormat' type everywhere except qemu_conf 7c0778deb7 qemuSnapshotPrepare: Prohibit 'manual' disk snapshot mode with VIR_DOMAIN_SNAPSHOT_CREATE_QUIESCE flag 627bcc8525 qemu: snapshot: Setup disks for manual snapshot only when the VM is actually paused 881aec23f8 qemuMigrationSrcToFile: Don't leak 'qemuFDPass' in cleanup path b98d29e022 qemu: Treat memory device source nodemask as strict NUMA policy b9abe20ce3 qemuxmlconftest: Introduce memory-hotplug-numa-preferred test case 60d5428d87 qemu.conf.in: Fix some typos d56d056094 qemu: tpm: Account for possible migration without actually sharing storage fe22d80c0c NEWS: Mention the passt hostname and fqdn attributes da4305b7bc qemu: Use pci_bus to identify multi-smmuv3 model 45ff1c0026 tests: add test for a single per-device smmuv3 86d8c3e331 ci: refresh with 'lcitool manifest' 414c5b11bf lib: Avoid changing const strings via strchr() and friends 821a028c5d iptablesPrivateChainCreate: Avoid modifying const string 5230ca5404 iptablesPrivateChainCreate: Switch to STRSKIP() 33c486f4fd iptablesPrivateChainCreate: Rename @tmp variable 1d95cee608 virSkipSpacesBackwards: Turn @endp into const 1b8d108c64 virfirewalltest: Introduce testIPtablesSetupPrivateChains() b3e48f9470 virstringtest: Introduce a test for virSkipSpacesBackwards() 141cf9c11f vircommand: Update documentation to virCommandSetDryRun() 216cb57ef6 cpu_map: update vmx-* features 0742c15d40 cpu_map: fix sync script to extract correctly vmx-* features 6a3fe7f7e0 spec: Fix RPM build when %{fedora} is undefined fce7fabd53 Post-release version bump to 12.0.0 cd16a1e913 Release of libvirt-11.10.0 c7733935a5 Translated using Weblate (Spanish) 2504f6f99b NEWS: Mention CVE-2025-13193 and improvements for block stats/config and backups f625585788 rpm: disable QEMU driver on non-64-bit arches for Fedora >= 44 ad76c59450 news: document improved certs, host validate details & TDX fix 54f3472d72 formatdomaincaps: Fix typo in Hyper-V Enlightenments section e60c21fc3f NEWS: Fix incoming migration to QEMU 10.0.0 6cd0d7951a NEWS: Add CVE-2025-12748 70f5a75f78 NEWS: Document features/improvements/bug fixes I've participated in df0d1c915d src: fix redundant/misleading build conditional for KVM MSR code 40f5e37ff3 Translated using Weblate (Chinese (Simplified) (zh_CN)) 6b1a32f1cc Translated using Weblate (Ukrainian) 67b8836be1 Translated using Weblate (Portuguese) 2e727417ac Translated using Weblate (Korean) e2a0af28df ci: refresh with 'lcitool manifest' c58ee467ad NEWS: Document Hyper-V virttype for Qemu Domains ead8915a7e Update translation files faa5c69899 po: Refresh potfile for v11.10.0 44118a7a70 Translated using Weblate (Italian) a4563be866 Translated using Weblate (Portuguese (Brazil)) 18cbdffec7 Translated using Weblate (Chinese (Simplified) (zh_CN)) 7f343d454b Translated using Weblate (Czech) cec8eb4a49 Translated using Weblate (Czech) afcfc6b8c4 Translated using Weblate (Korean) 8a16508bdb Translated using Weblate (Portuguese) 33b512a7de qemuxmlconftest: Update 'aarch64' tests using 'virt-4.2' machine type f6212a4ff2 qemuxmlconftest: Update 'aarch64' tests using 'virt-4.0' machine type 3fab3ea57e qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.2.0-rc1-38-gfb241d0a1f' 59685009ee NEWS: mention VNC 'wait' attribute for bhyve 3a2127bef1 docs: bhyve: document VNC's wait attribute 4176cdc978 spec: Fix 'libvirt-daemon-driver-storage-zfs' on Fedora 43 and newer c1576ad519 Add support for 'dpofua' setting for SCSI disks b1a2ea971d virDomainDiskDefCheckABIStability: Add missing check for 'removable' property eadbb34a8f docs: page.xsl: Convert repository edit URI into a parameter 361106506b docs: site.xsl: Use separate 'asset_href_base' and 'link_href_base' 071d29b726 docs: css: Split out any main-page CSS to local.css 5ca7270c08 docs: index: Link to security notices from home page 895a973c49 kbase: Add note about preserving VM on shutdown to backup article eca6a92a6d qemu: backup: Add support for VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN 56432ed065 lib: Introduce VIR_DOMAIN_BACKUP_BEGIN_PRESERVE_SHUTDOWN_DOMAIN flag 4453331b89 lib: Introduce VIR_DOMAIN_EVENT_SUSPENDED_GUEST_SHUTDOWN event reason 8e5b0cd450 qemuBlockJobProcessEventConcludedBackup: Notify the backup job later 0fe378f1b1 qemu: backup: Don't attempt to stop the NBD server twice 7d90085e12 qemuProcessReconnect: Continue reconnection if VM untergoes fake-reboot 18ceb1002d virDomainNestedJobAllowed: Allow VIR_JOB_MODIFY_MIGRATION_SAFE if VIR_JOB_MODIFY is allowed baf5f7b0ee qemu: always report s390 prot-virt feature in domain caps e98a12d133 qemu: always report TDX feature caps on x86 62d14ba496 qemu: correctly detect working TDX support dac28c6185 docs: describe support for multiple certs & PQC config 59a65f4987 rpc: support loading multiple certificate identities ba8e1720aa rpc: reduce duplication when locating credentials 375ab122d5 rpc: move file access checks into TLS config API 88a7a57806 rpc: skip fallback when using custom PKI path 289d554998 remote: support specifying multiple keys/certs in libvirtd.conf d249170bf6 rpc: add support for loading multiple certs & keys 74a664edd7 rpc: refactor TLS sanity checking to support many cert files 9aff986bc4 rpc: change 'isServer' parameter from 'int' to 'bool' 86143735a6 remote: use g_strfreev for free()ing lists of strings 65d21c8692 domain_addr.c: update virtconsole port reservation comment and allowZero var 2083efe030 domain_addr.c: Fix virtio console port autoassign on virtio-serial bus 22059030f9 tests: Add console-virtio-serial-autoassign-address tests e9f74bbdba src: cap the data size in stream I/O functions 2e595888aa include: fix version for recent block stats constants 3e33e91c5d tests: qemuxmlconftest: Add case for hyperv domains 9290014103 tests: qemucapabilities: Introduce MSHV capability 33e716a56d tests: Add domaincaps case for mshv 82b40953a0 conf: Fix virttype handling in schemas 7b752b98f1 qemu: conditionally add /dev/mshv to acl ba40f678f4 qemu: use mshv accel for hyperv domains c852d9ca3c qemu: Append mshv to hwaccel list. 6d0702f4cc qemu: Query and use mshv capabilities 3b7edf755d qemu: Introduce mshv capabilities 029933be86 qemu: only allow enabling deprecated features that are supported 906f0e448a qemu: query and cache static/host deprecated features 82eb7690a0 qemu: refactor load/format of deprecated features 8403817182 qemu: rename modelinfo's deprecated_props to full_dep_props 37b0b74b48 tests: Don't link vmx2xmltest with esx_lib 7d5a1a5384 Edit apps.rst to add Apache CloudStack in the IaaS section. 4ab1e25f6e qemu: Remove redundant kvm group config in sysusers.d 6bc397eb23 cputest: Skip test for Intel(R) Xeon(R) 6788P CPU when QEMU driver is disabled 047affcbd0 tests: skip vmx tests when ESX is disabled f1c8c9a1e8 build: drop userfaultfd_sysctl option 7b471c563f tests: qemuxmlconfdata: provide device-pluggable smmuv3 sample XML and CLI args 4d6419b286 qemu: Implement pluggable-device smmuv3 e70c4d54d3 conf: Support multiple device-pluggable smmuv3 IOMMUs d97bc25b82 qemu: Format IOMMU devices after controllers a523920171 qemu: make qemuBuildDeviceAddressPCIGetBus more generic 5944f566ac bhyve: support VNC 'wait' attribute c8bffda588 conf: introduce 'wait' attribute for VNC ec501bdc5e tools: inform user which hardware virt was found during validation e6d8983cdb tools: be explicit about failure to find x86 secure virt 785c9fd512 tools: inform user which CVM is found during validation f44e2ecc5b tools: inform user which IOMMU was found during validation c0f42f4d76 tools: allow passing details for passed validation tests fa15860ac1 vmx2xmltest: Add a test case for disks in subfolder 07d3cc9d57 esx: Allow disk images in subdirectories f82d30307d vmx2xmltest: Drop custom file name parse function 29ddffbe6c tests: Introduce vmx2xmlmock ad92def79e esx: Make esxVI_LookupDatastoreByName() mockable c3a927c121 esx: Make esxVI_LookupDatastoreHostMount() mockable bdd681f9b2 esx: Make esxVI_LookupDatastoreList() mockable 3ccb15006a esx: Expose esxParseVMXFileName() for tests 6db235e913 libvirt_esx.syms: Put proper header file name into comment 4ae5351a50 docs: domain: add watchdog notification support 475ed7075d qemuDomainPrepareDiskSourceData: Setup 'detect_zeroes' for all layers 312be5eb9a qemuxmlconftest: Improve coverage of 'disk-detect-zeroes' test case f5bb1ae77b selinux: Mark anything using content_context as shared 5616eaf63e selinux: Add is_shared plumbing to RestoreFileLabel f4903ebcf7 selinux: Don't remember labels for shareable SCSI devices 3a611df5b1 selinux: Match remember/recall arguments for SavedStateLabel cf0806477b bhyve: s/provconn/privcon/ a379327d8a qemu: snapshot: Set umask for 'qemu-img' when creating external inactive snapshots 2a326c415a qemu: Check ACLs before parsing the whole domain XML eb4322dfe8 ch: Check ACLs before parsing the whole domain XML 7285c10a7e vz: Check ACLs before parsing the whole domain XML a6dcfee896 lxc: Check ACLs before parsing the whole domain XML a1f48bca07 libxl: Check ACLs before parsing the whole domain XML b45f10bc0a bhyve: Check ACLs before parsing the whole domain XML e6de1e43ab conf: Add virDomainDefIDsParseString 05baaddb3f virXMLFormatMetadata: Don't modify deprecated 'xmlIndentTreeOutput' f307c7dc0c virVBoxSnapshotConfSaveVboxFile: Don't modify deprecated 'xmlIndentTreeOutput' a181d99cba bhyve: domain: improve disks validation b3e1e9a187 bhyve: domain: refactor bhyveDomainDeviceDefValidate() 26a9c7d840 bhyve: support queue configuration for NVMe disks 52bddfd65c conf: domain_validate: make disk queue configuration driver specific f81e5158d4 docs: drvbhyve: add guest-specific nodes section b2c7dba3eb docs: drvbhyve: improve the manpage link f4751e23d3 docs: drvbhyve: document device passthrough 15833693e6 meson: default to system crypto policies where available 81ce368347 ch: Sort driver sources and drop header files b224d2b377 ch: Assign device alias early 85cf0e4f17 ch: Set transient domain definition 7e5d224536 ch: Use correct domain definition in chDomainGetXMLDesc() 29195b7b17 ch_process: Avoid memleak in chProcessAddNetworkDevice() bf34b3c86f domain_capabilities: Use virXMLFormatElement() in FORMAT_PROLOGUE and FORMAT_EPILOGUE macros d2d442d79d domain_capabilities: Check NULL in FORMAT_PROLOGUE b20ae99e1d domain_capabilities: Rework virDomainCapsCPUFormat() 166fad633a domain_capabilities: Rework virDomainCapsCPUCustomFormat() 132ba55a00 domain_capabilities: Move indentation adjustment out of virDomainCapsCPUCustomFormat() 238be79bb9 bhyve: auto-assign PCI addresses for hostdevs 43579767f4 bhyve: Tie the 'passthru' option to the 'hostdev' XML config 447252a54c bhyve: Advertise hostdev support e4056c458a bhyve: Support passing the 'passthru' command line option 4714272b39 bhyve: process: improve domain startup error handling afafb2a28b cpu_map: Add YongFeng-v3 CPU model a6000b20ba cpu_map: Add YongFeng-v2 CPU model 98b4609b51 cpu_map: Add YongFeng CPU model db80641510 cpu_map: Add features used by Zhaoxin YongFeng Processor 56ee1bfb7a cpu_map: Add Zhaoxin CentaurHauls CPU vendor ee95c9d7d1 cpu_map: Add EPYC-Turin CPU model f37126bc55 cpu_map: Add EPYC-Milan-v3 CPU model 0fcde0edc5 cpu_map: Add EPYC-v5 CPU model d2925f23e7 cpu_map: Add EPYC-Rome-v5 CPU model 7e8f1698c7 cpu_map: Add EPYC-Genoa-v2 CPU model dec859cb66 cpu_map: Add ClearwaterForest CPU model b8d830ff54 cpu_map: Add GraniteRapids-v3 CPU model cbc2f8e2b3 cpu_map: Add SapphireRapids-v4 CPU model bd43aa4cbb cpu_map: Add SierraForest-v3 CPU model 64143828d7 cpu_map: Add SierraForest-v2 CPU model 189d7b64ac cputest: Add data for AMD Ryzen 9 9950X 16-Core CPU 034f02d25c cputest: Add data for Intel(R) Xeon(R) 6788P CPU b7c92ce918 cputest: Read more MSRs in cpu-data.py a3395fb598 cputest: Ignore missing MSRs in cpu-data.py 21c61bee36 sync_qemu_models_i386: Support adding models to an empty group d3888c470a sync_qemu_models_i386: Handle unknown features in GraniteRapids-v2 b74b452f8a sync_qemu_models_i386: Print current model for unknown features 58972035bd sync_qemu_models_i386: Fix typo in CPUID_8000_0021_EAX_No_NESTED_DATA_BP 96df5805fd cpu_map: Fix ordering of CPU models in meson.build a86973056a cpu_map: Add feature for detecting Indirect Target Selection immunity 81c20d2c32 cpu_map: Add feature for detecting Branch History Injection immunity c80b283277 cpu_map: Add features for Transient Scheduler Attacks mitigation b72758d62a cpu_map: Add a few missing features to 0x80000021 CPUID leaf 819ce69b38 cpu_map: Add msr-imm CPU feature a088734d57 scripts: do not use uninitialized variable 1ff3d18528 tools/nss: check for missing array element f1e59f961d src: check for invalid stream in virStreamInData 15c9ca383c scripts: use subprocess.run instead of os.system 7db2138dc9 qemu: Use query-accelerators to query accelerators 4c266d53e8 qemu: Introduce query-accelerators cap 878470256e src: report error from failing to add timer/FD watches 9b7ef8058b conf: Don't leak virDomainDiskDef's 'statistics' member 7ee9dbacbe qemu: Add support for enabling timed block device statistics collection 19fc614d53 conf: Add configuration option for timed disk statistics collection 1c4234b34e qemu: capabilities: Introduce QEMU_CAPS_DISK_TIMED_STATS 166be0d48c Expose qemu timed block statistics via bulk stats API 6914b4f2a5 qemu_monitor: Extract 'timed_stats' of block devices d1eafbe88b Expose qemu storage request limits via bulk stats API c33e5971b1 qemu: monitor: Extract block limit values c177003d4d qemucapabilitiestest: qemucapabilitiestest: Update 'caps_10.2.0_x86_64' to 'v10.1.0-1969-g53b41bb789' ed0f489352 qemu: capabilities: Fix logic for formatting 'reconnect' parameter d0316c24ca qemu: capabilities: Retire QEMU_CAPS_CHARDEV_RECONNECT ce0c3e0ea3 qemucapabilitiesdata: README: Add rules for dumps of unreleased qemu 5e8698aa76 ci: Refresh with 'lcitool manifest' b100dabd6d rpm: change from fuse-devel to fuse3-devel 258bb23e94 Remove arm from KVM arches ba16113c76 qemu: Ignore "ht" CPU feature 4d5c1bc241 qemu_monitor: Filter CPU features reported by QEMU c15ae99dab qemu_process: Always fix CPUs on reconnect 2ab6925218 qemu_domain: Fix qemuDomainFixupCPUs fbf44bc8cf qemu_domain: Simplify qemuDomainFixupCPUs fd6cf1b44a cpu_conf: Make virCPUDefFilterFeatures return void 3c7e44d3c8 Post-release version bump to 11.10.0 91f3e8b667 Release of libvirt-11.9.0 cdbb3bc8d7 NEWS: mention 'manual' snapshot mode improvement 73b99b2ba0 Translated using Weblate (Portuguese) 4bc00fd6da Translated using Weblate (Portuguese) d31a4a2c78 Translated using Weblate (Portuguese) f80eec7eab NEWS: Document features/improvements/bug fixes I've participated in 05ca6be8a6 Translated using Weblate (Ukrainian) b59bed2603 Translated using Weblate (Portuguese) 63e989cc26 docs: drvbhyve: document NVMe device cc2b022c35 NEWS: document bhyve changes for 11.9.0 86bba8f1d9 drvch: Document config file locations 3299ce060f ch: Load ch.conf from SYSCONFDIR 4c5021bc92 drvch: Demote example section to a subsection a96a4b04e1 docs: Document supported URIs for CH driver 47683ca63d Update translation files 339ff29e5d po: Refresh potfile for v11.9.0 fa89c178a5 domain_conf: Avoid memory leak in virDomainMemoryDefFree() ccc0538329 NEWS: Document virtio options for memory models e6d1cb69d5 qemu_command: Generate virtio options for memory device 4848c85053 conf: Introduce virtio options for virtio memory models 3c6d7f2705 qemu: Use virDomainMemoryIsVirtioModel() 0d46a1f4d5 conf: Introduce virDomainMemoryIsVirtioModel() 6787f82cfc domain_conf: Switch to virXMLFormatElement() in virDomainMemoryDefFormat() 30eab13fc9 domain_conf: Make virDomainMemoryDefFormat() return void 93c4b1bf55 bhyve: support specifying disk rotation rate 4d70b2c783 bhyve: nvme: check if NVMe is supported by bhyve a997aee58f bhyve: do not allow more than one NVMe device per controller 8d9bf732a7 bhyve: tests: cover 2 NVMe devices on 2 controllers case 79e46b1698 bhyve: implement NVMe device support 1ab27a5b96 Translated using Weblate (Italian) 6038ed07c2 Translated using Weblate (Spanish) d207136b5d Translated using Weblate (Finnish) 02266588b4 Translated using Weblate (Russian) 92e1519395 Translated using Weblate (Portuguese) 0a30b6d2e5 qemuDomainBlocksStatsGather: Fix blockstats gathering after refactor f6ea64f182 conf: never reject <disk> <seclabel relabel='no'> overrides be638396f0 NEWS: ch: announce network hotplug feature 058df74ed6 ch: implement network device hot detach 92441ba35a ch: implement network device hot attach 6a4c59e993 ch: add net device alias assignment b90cf0c916 apparmor: Allow AMD-SEV device access for AMD-SEV VM d8d3595851 qemu: Drop /dev/kvm from default device ACL f3f8408975 NEWS: Document Hyper-v never notify feature for spinlocks 66a47f8049 qemu: Update hyperv spinlock retries count default d0de1b89be qemu: Fix hyperv spinlock retries count type mismatch 6862969cf8 qemu: forbid readonly attribute for externally launched virtiofsd 69e5ad478e qemumonitorjsontes: Properly free blockstats 45f49ad340 Remove qemuMonitorBlockStatsUpdateCapacityBlockdev 5b0fd22920 qemuMonitorJSONGetAllBlockStatsInfo: Directly probe data from 'query-named-block-nodes' a189ad03bb qemuMonitorJSONBlockStatsUpdateCapacityData: Merge into caller 5485e7e832 qemuMigrationCookieAddNBD: Use qemuBlockGetNamedNodeData to fetch the capacities 58aa005f3e qemu: monitor: Rework qemuBlockStats into a g_object d35e519dca qemu_monitor_json.h: Use consistent function hader coding style 6773f77dad qemu_monitor_json.c: Use consistent function hader coding style 74ca46972f qemu: monitor: Remove qemuMonitorQueryBlockstats 96980df098 virNetDevVlanParse: Refactor cleanup e412761206 virNetDevVlanParse: Use g_autofree for temporary variables 40c4e4c847 virNetDevVlanParse: Don't clear data on failure 4c32ad3469 qemuxmlconftest: Add example for "sgio='filtered'" disk option 1ebee849db docs: snapshot: Add a note that blockjobs ought to be avoided with 'manual' snapshots 69e066c0ba qemu: snapshot: Allow snapshot consisting only of 'manual'-y handled disks 2e19e68093 qemu: snapshot: Deactivate block nodes on manually snapshotted disks f879d5f403 qemu: migration: Don't reactivate block nodes after migration failure any more 7b5566ce67 qemu: Re-activate block nodes before storage operations 84ad496494 qemu: block: Introduce helper function to ensure that block nodes are active 648b0ddb13 qemu: monitor: Track inactive state of block nodes in 'qemuBlockNamedNodeData' ac6b351b42 qemuDomainGetStatsCpuProc: Use string constants for CPU stats 0c1a1f9fd4 qemu: Drop reconnectBlockjobs from _qemuDomainObjPrivate struct Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virt-manager: update to v5.1.0Bruce Ashfield2025-12-121-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also as part of this update, we drop the python3-libxml2 depend and rdepend. That package is no longer being generated by OEcore and is scheduled to be removed from upstream libxml (so there's no sense just brining the package here). Upstream virt-manager has been moving to ElementTree for their xml handling/API requirements, so we count on that to provide us what we need without the xml2 python bindings. Bumping virt-manager to version v5.1.0-24-g35ad9057f, which comprises the following commits: 35ad9057f virtinst: Fix XDG_DATA_HOME handling 488389ced ci: Add gobject-introspection dep e1613dba5 ci: Fix test-against-libvirt-git a2baaf789 installer: add support to use device boot order 3985b0746 virtinst: remove legacy attribute from set_boot_order/get_boot_order 3a25792d9 virtinst: guest: introduce can_use_device_boot_order 25670b2ee virtinst: rework get_boot_order 161fb1baa maint: use constants instead of strings for boot devices e438a7724 ci: bump actions/checkout from 5 to 6 411f019f8 virtinst: add support for pcihole64 53df7b496 virtinst: add support for acpi-generic-initiator d57e2e738 virtinst: interface: add support for backend.hostname and backend.fqdn 57e6f96f9 virtManager: wrapped details hw-panel with GtkScrolledWindow f9a01fbf9 metainfo: Add developer tag 9e9252982 Rename AppStream metadata to rDNS format f907ede75 Calling loader.close() before pixbuf assignment to avoid NoneType pixbuf 6fe47feca Fix typo in virt-clone documentation 766bf2ecd xmlapi: add xmletree.py backend d0372e82c xmllibxml2: lazily import libxml2 ff9fa95e5 xmlbase: fix parentnode None check d4988b02e xmlapi: split out xmlbase.py and xmllibxml2.py ea71cf9a8 virtinst: cloudinit: include empty meta-data file ecd280d59 addhardware: network: adjust supported network devices for bhyve a2c00ee84 ci: bump actions/setup-python from 5 to 6 eb4898b19 Release of virt-manager 5.1.0 8d7c3adb2 Update translation files 5915dd09f po: Refresh translation template 1427cc990 tests: urls: update old Fedora version 84eaa535a Translated using Weblate (Japanese) f3f797c82 Translated using Weblate (Arabic) d3562d08a Translated using Weblate (Finnish) aa5f1bb79 Translated using Weblate (German) 00a9046a9 details: Add support for startup policy for USB passed through devices 6fefb9ee0 addhardware: Add support for startup policy for USB passed through devices e518ad262 addhardware: Add a function build_hostdev_usb_startup_policy_combo 52752d1bf virt-install: Add source.startupPolicy for USB passed through devices 9bf51435d virtinst: Do not assume virtio is supported on Arm virt 9d0e875f9 virtinst: Do not require x86 for virtio b8861f10f virtinst: Use ramfb for UEFI on Arm 0b10fd64d virtinst: Use sd only for vexpress 2a14495ac virtinst: Fallback to usb instead of ide on non-x86 dfcab03dc tests: Add virt-install-aarch64-win11 d11245452 ci: bump actions/checkout from 4 to 5 1ead880b2 virtinst: add support for creating TDX guests ead255cad Translated using Weblate (Turkish) a477190e8 Translated using Weblate (Arabic) 84ee0a312 Translated using Weblate (Chinese (Traditional) (zh_TW)) f28525d03 Translated using Weblate (Spanish) a44165a4f Translated using Weblate (Spanish) b6200b7f3 Translated using Weblate (German) df95dc1a3 Translated using Weblate (Polish) 5a84d84b8 Translated using Weblate (Russian) bcbadd869 Translated using Weblate (Romanian) 91a2ba307 Translated using Weblate (Italian) 2df46a841 Translated using Weblate (Czech) 528b2fce4 Translated using Weblate (Ukrainian) 20cd9fcbd Translated using Weblate (Georgian) 38e9b13d5 Translated using Weblate (Swedish) 77015e612 Translated using Weblate (Portuguese (Brazil)) 2a6f7d435 Translated using Weblate (Korean) 0c68d8bb9 Update translation files cf392cf04 Add keywords to virt-manager.desktop.in bd8fe24a1 chore: enable flake8-pytest-style for ruff 67002f4b2 tests: rename test_create() helper to check_create() 988b51392 virt-manager: improve feedback for unavailable system tray icon 60f200bd2 ci: extend pre-commit configuration with ruff-check e022f4e0d chore: configure ruff for linting 96d306bd3 chore: reformat .pre-commit-config.yaml 83e4b5568 ci: rename & generalize black workflow 27b788e44 chore: split string into different continuation lines 7bd89f7cd chore: add inline noqa for E501 (long lines) 201417e00 tests: simplify checking for untested XML properties c8d8c32fd tests: refactor URL test from ini files 035abfbf9 tests: use pytest.raises() instead of try/except blocks 85c43959c chore: avoid using 'l' as variable/parameter name 48e907ec8 po: Refresh translation template 3c1346479 Translated using Weblate (Catalan) 4c67cbd05 Translated using Weblate (Chinese (Simplified) (zh_CN)) 44c9aa374 chore: remove extra parentheses c3df2ba5d chore: drop "object" inheritance c814183ba chore: concatenate strings in the same line d074f56e5 fix: move parameter out of gettext calls 576b07bc6 chore: explicitly specify flake8 issue to silent 2539b2637 fix: switch from logging.WARN to logging.WARNING e5cd614ca chore: use "not in/is" rather than "not .. in/is" a4ed49c83 chore: exclude E402 in wrapper scripts 0ef185c15 data: improve desktop file 4b89c39ee Add Ctrl+Alt+Shift+Esc key command for logind's SecureAttentionKey 62f976a61 fix: default start_folder to None f901c3277 tests: add checks for cloud-init config files from URL 80109ffeb virtinst: cloudinit: add support to fetch cloud-init config files from URL 5b2d0997a virtinst: cloudinit: refactor creation of could-init config files 30bbee361 virtinst: cloudinit: convert all functions to class methods 515a50a83 virtinst: cloudinit: move all variables to init 4e51b595a Translated using Weblate (Spanish) e7cbaab55 Translated using Weblate (Chinese (Traditional) (zh_TW)) af9baaceb Translated using Weblate (German) e17c3ef3a Translated using Weblate (German) 237896029 Validation: allow spaces, disallow slashes 443123ece virtinst: urldetect: detect Debian version for ISO images 66aa81ae6 test_urldetect: arch is detected from the ISO media fbf7f060b virtinst: urldetect: figure out Debian arch from the ISO media 4257e1974 virtinst: urldetect: move default Debian arch to _set_url_paths c8a5b8186 virtinst: urldetect: don't check x86_64 for Debian/Ubuntu 3b3eac28a test_urldetect: use fake badarch Debian fb71f02fa uitests: Add coverage for mixed internal and external snapshots 09574977d uitests: fix testManagerDefaultStartup race 6458f09b7 uitests: fix testNewVMSession after networking changes f31287249 uitests: fix `push button` usage on fedora 41 4f9618289 virt-install: detect wayland in order to start virt-viewer Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>