2006-09-21 23:24:37 +08:00
|
|
|
# -*- rpm-spec -*-
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# A client only build will create a libvirt.so only containing
|
|
|
|
# the generic RPC driver, and test driver and no libvirtd
|
|
|
|
# Default to a full server + client build
|
|
|
|
%define client_only 0
|
|
|
|
|
|
|
|
# Now turn off server build in certain cases
|
|
|
|
|
|
|
|
# RHEL-5 builds are client-only for s390, ppc
|
|
|
|
%if 0%{?rhel} == 5
|
|
|
|
%ifnarch i386 i586 i686 x86_64 ia64
|
|
|
|
%define client_only 1
|
|
|
|
%endif
|
|
|
|
%endif
|
|
|
|
|
|
|
|
# Disable all server side drivers if client only build requested
|
|
|
|
%if %{client_only}
|
|
|
|
%define server_drivers 0
|
|
|
|
%else
|
|
|
|
%define server_drivers 1
|
|
|
|
%endif
|
|
|
|
|
|
|
|
|
2009-09-22 17:42:06 +08:00
|
|
|
# Now set the defaults for all the important features, independent
|
2009-09-16 23:02:38 +08:00
|
|
|
# of any particular OS
|
|
|
|
|
|
|
|
# First the daemon itself
|
|
|
|
%define with_libvirtd 0%{!?_without_libvirtd:%{server_drivers}}
|
|
|
|
%define with_avahi 0%{!?_without_avahi:%{server_drivers}}
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# Then the hypervisor drivers that run on local host
|
2009-09-16 23:02:38 +08:00
|
|
|
%define with_xen 0%{!?_without_xen:%{server_drivers}}
|
|
|
|
%define with_qemu 0%{!?_without_qemu:%{server_drivers}}
|
|
|
|
%define with_openvz 0%{!?_without_openvz:%{server_drivers}}
|
|
|
|
%define with_lxc 0%{!?_without_lxc:%{server_drivers}}
|
|
|
|
%define with_vbox 0%{!?_without_vbox:%{server_drivers}}
|
|
|
|
%define with_uml 0%{!?_without_uml:%{server_drivers}}
|
2010-10-15 01:46:41 +08:00
|
|
|
%define with_xenapi 0%{!?_without_xenapi:%{server_drivers}}
|
2009-09-16 23:02:38 +08:00
|
|
|
# XXX this shouldn't be here, but it mistakenly links into libvirtd
|
2009-09-16 23:02:38 +08:00
|
|
|
%define with_one 0%{!?_without_one:%{server_drivers}}
|
2009-09-16 23:02:38 +08:00
|
|
|
|
|
|
|
# Then the hypervisor drivers that talk a native remote protocol
|
|
|
|
%define with_phyp 0%{!?_without_phyp:1}
|
|
|
|
%define with_esx 0%{!?_without_esx:1}
|
2009-09-16 23:02:38 +08:00
|
|
|
|
|
|
|
# Then the secondary host drivers
|
|
|
|
%define with_network 0%{!?_without_network:%{server_drivers}}
|
|
|
|
%define with_storage_fs 0%{!?_without_storage_fs:%{server_drivers}}
|
|
|
|
%define with_storage_lvm 0%{!?_without_storage_lvm:%{server_drivers}}
|
|
|
|
%define with_storage_iscsi 0%{!?_without_storage_iscsi:%{server_drivers}}
|
|
|
|
%define with_storage_disk 0%{!?_without_storage_disk:%{server_drivers}}
|
|
|
|
%define with_storage_mpath 0%{!?_without_storage_mpath:%{server_drivers}}
|
|
|
|
%define with_numactl 0%{!?_without_numactl:%{server_drivers}}
|
|
|
|
%define with_selinux 0%{!?_without_selinux:%{server_drivers}}
|
|
|
|
|
|
|
|
# A few optional bits off by default, we enable later
|
2009-07-29 17:05:39 +08:00
|
|
|
%define with_polkit 0%{!?_without_polkit:0}
|
2009-06-29 19:33:13 +08:00
|
|
|
%define with_capng 0%{!?_without_capng:0}
|
2009-07-29 17:05:39 +08:00
|
|
|
%define with_netcf 0%{!?_without_netcf:0}
|
2009-11-20 23:45:46 +08:00
|
|
|
%define with_udev 0%{!?_without_udev:0}
|
|
|
|
%define with_hal 0%{!?_without_hal:0}
|
2009-11-04 02:59:18 +08:00
|
|
|
%define with_yajl 0%{!?_without_yajl:0}
|
2010-05-06 00:20:28 +08:00
|
|
|
%define with_nwfilter 0%{!?_without_nwfilter:0}
|
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 05:02:18 +08:00
|
|
|
%define with_libpcap 0%{!?_without_libpcap:0}
|
2010-05-26 03:31:38 +08:00
|
|
|
%define with_macvtap 0%{!?_without_macvtap:0}
|
2010-08-25 18:28:02 +08:00
|
|
|
%define with_libnl 0%{!?_without_libnl:0}
|
2010-09-15 21:44:11 +08:00
|
|
|
%define with_audit 0%{!?_without_audit:0}
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%define with_dtrace 0%{!?_without_dtrace:0}
|
2009-07-29 17:05:39 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# Non-server/HV driver defaults which are always enabled
|
|
|
|
%define with_python 0%{!?_without_python:1}
|
|
|
|
%define with_sasl 0%{!?_without_sasl:1}
|
|
|
|
|
|
|
|
|
|
|
|
# Finally set the OS / architecture specific special cases
|
|
|
|
|
2008-06-13 00:10:50 +08:00
|
|
|
# Xen is available only on i386 x86_64 ia64
|
2009-03-04 21:17:44 +08:00
|
|
|
%ifnarch i386 i586 i686 x86_64 ia64
|
2008-06-13 00:10:50 +08:00
|
|
|
%define with_xen 0
|
|
|
|
%endif
|
|
|
|
|
2009-11-12 02:07:34 +08:00
|
|
|
# Numactl is not available on s390[x]
|
|
|
|
%ifarch s390 s390x
|
|
|
|
%define with_numactl 0
|
|
|
|
%endif
|
2009-09-16 23:02:38 +08:00
|
|
|
|
2010-10-15 01:46:41 +08:00
|
|
|
# RHEL doesn't ship OpenVZ, VBox, UML, OpenNebula, PowerHypervisor, ESX,
|
|
|
|
# or libxenserver (xenapi)
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?rhel}
|
|
|
|
%define with_openvz 0
|
|
|
|
%define with_vbox 0
|
|
|
|
%define with_uml 0
|
|
|
|
%define with_one 0
|
|
|
|
%define with_phyp 0
|
|
|
|
%define with_esx 0
|
2010-10-15 01:46:41 +08:00
|
|
|
%define with_xenapi 0
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
|
|
|
|
|
|
|
# RHEL-5 has restricted QEMU to x86_64 only and is too old for LXC
|
|
|
|
%if 0%{?rhel} == 5
|
|
|
|
%ifnarch x86_64
|
|
|
|
%define with_qemu 0
|
|
|
|
%endif
|
|
|
|
%define with_lxc 0
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# RHEL-6 has restricted QEMU to x86_64 only, stopped including Xen
|
|
|
|
# on all archs. Other archs all have LXC available though
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?rhel} >= 6
|
2009-09-16 23:02:38 +08:00
|
|
|
%ifnarch x86_64
|
|
|
|
%define with_qemu 0
|
|
|
|
%endif
|
2009-09-16 23:02:38 +08:00
|
|
|
%define with_xen 0
|
|
|
|
%endif
|
|
|
|
|
|
|
|
# Fedora doesn't have any QEMU on ppc64 - only ppc
|
2008-12-12 15:36:20 +08:00
|
|
|
%if 0%{?fedora}
|
2008-06-13 00:10:50 +08:00
|
|
|
%ifarch ppc64
|
2008-02-20 23:42:30 +08:00
|
|
|
%define with_qemu 0
|
|
|
|
%endif
|
2008-06-13 00:10:50 +08:00
|
|
|
%endif
|
|
|
|
|
2010-11-09 00:32:02 +08:00
|
|
|
# PolicyKit was introduced in Fedora 8 / RHEL-6 or newer
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?fedora} >= 8 || 0%{?rhel} >= 6
|
2008-09-17 22:09:13 +08:00
|
|
|
%define with_polkit 0%{!?_without_polkit:1}
|
2008-06-13 00:10:50 +08:00
|
|
|
%endif
|
2008-02-20 23:42:30 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# libcapng is used to manage capabilities in Fedora 12 / RHEL-6 or newer
|
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
2009-06-29 19:33:13 +08:00
|
|
|
%define with_capng 0%{!?_without_capng:1}
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# netcf is used to manage network interfaces in Fedora 12 / RHEL-6 or newer
|
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
|
|
|
%define with_netcf 0%{!?_without_netcf:%{server_drivers}}
|
2009-07-29 00:30:48 +08:00
|
|
|
%endif
|
|
|
|
|
2009-11-20 23:45:46 +08:00
|
|
|
# udev is used to manage host devices in Fedora 12 / RHEL-6 or newer
|
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
|
|
|
%define with_udev 0%{!?_without_udev:%{server_drivers}}
|
|
|
|
%else
|
|
|
|
%define with_hal 0%{!?_without_hal:%{server_drivers}}
|
|
|
|
%endif
|
|
|
|
|
2009-11-04 02:59:18 +08:00
|
|
|
# Enable yajl library for JSON mode with QEMU
|
|
|
|
%if 0%{?fedora} >= 13 || 0%{?rhel} >= 6
|
|
|
|
%define with_yajl 0%{!?_without_yajl:%{server_drivers}}
|
|
|
|
%endif
|
|
|
|
|
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 05:02:18 +08:00
|
|
|
# Enable libpcap library
|
|
|
|
%if %{with_qemu}
|
2010-05-06 00:20:28 +08:00
|
|
|
%define with_nwfilter 0%{!?_without_nwfilter:%{server_drivers}}
|
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 05:02:18 +08:00
|
|
|
%define with_libpcap 0%{!?_without_libpcap:%{server_drivers}}
|
2010-05-26 03:31:38 +08:00
|
|
|
%define with_macvtap 0%{!?_without_macvtap:%{server_drivers}}
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if %{with_macvtap}
|
|
|
|
%define with_libnl 1
|
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 05:02:18 +08:00
|
|
|
%endif
|
|
|
|
|
2010-09-15 21:44:11 +08:00
|
|
|
%if 0%{?fedora} >= 11 || 0%{?rhel} >= 5
|
|
|
|
%define with_audit 0%{!?_without_audit:1}
|
|
|
|
%endif
|
|
|
|
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%if 0%{?fedora} >= 13 || 0%{?rhel} >= 6
|
|
|
|
%define with_dtrace 1
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# Force QEMU to run as non-root
|
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
2009-07-16 05:25:01 +08:00
|
|
|
%define qemu_user qemu
|
|
|
|
%define qemu_group qemu
|
|
|
|
%else
|
|
|
|
%define qemu_user root
|
|
|
|
%define qemu_group root
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
|
|
|
|
# The RHEL-5 Xen package has some feature backports. This
|
|
|
|
# flag is set to enable use of those special bits on RHEL-5
|
|
|
|
%if 0%{?rhel} == 5
|
2009-06-25 01:32:56 +08:00
|
|
|
%define with_rhel5 1
|
2009-09-16 23:02:38 +08:00
|
|
|
%else
|
|
|
|
%define with_rhel5 0
|
2009-01-21 01:27:34 +08:00
|
|
|
%endif
|
|
|
|
|
|
|
|
|
2010-11-12 01:21:28 +08:00
|
|
|
Summary: Library providing a simple virtualization API
|
2006-02-10 01:45:11 +08:00
|
|
|
Name: libvirt
|
2005-11-02 23:37:34 +08:00
|
|
|
Version: @VERSION@
|
2008-06-13 00:10:50 +08:00
|
|
|
Release: 1%{?dist}%{?extra_release}
|
2008-08-08 22:27:05 +08:00
|
|
|
License: LGPLv2+
|
2005-11-02 23:37:34 +08:00
|
|
|
Group: Development/Libraries
|
2009-08-21 18:10:37 +08:00
|
|
|
Source: http://libvirt.org/sources/libvirt-%{version}.tar.gz
|
2008-07-07 18:00:30 +08:00
|
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
|
2006-09-21 23:24:37 +08:00
|
|
|
URL: http://libvirt.org/
|
2009-07-29 15:52:36 +08:00
|
|
|
BuildRequires: python-devel
|
2009-07-21 17:16:15 +08:00
|
|
|
|
|
|
|
# The client side, i.e. shared libs and virsh are in a subpackage
|
2010-05-04 22:13:55 +08:00
|
|
|
Requires: %{name}-client = %{version}-%{release}
|
2009-07-21 17:16:15 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
# Used by many of the drivers, so turn it on whenever the
|
|
|
|
# daemon is present
|
|
|
|
%if %{with_libvirtd}
|
2007-06-27 07:01:54 +08:00
|
|
|
Requires: bridge-utils
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_network}
|
2010-08-12 02:25:09 +08:00
|
|
|
Requires: dnsmasq >= 2.41
|
2007-06-27 07:01:54 +08:00
|
|
|
Requires: iptables
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2010-05-06 00:20:28 +08:00
|
|
|
%if %{with_nwfilter}
|
|
|
|
Requires: ebtables
|
|
|
|
Requires: iptables
|
|
|
|
Requires: iptables-ipv6
|
|
|
|
%endif
|
2008-11-26 22:46:49 +08:00
|
|
|
# needed for device enumeration
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_hal}
|
2008-11-26 22:46:49 +08:00
|
|
|
Requires: hal
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2009-11-20 23:45:46 +08:00
|
|
|
%if %{with_udev}
|
|
|
|
Requires: udev >= 145
|
|
|
|
%endif
|
2007-12-06 02:21:27 +08:00
|
|
|
%if %{with_polkit}
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >=6
|
2009-08-06 20:54:08 +08:00
|
|
|
Requires: polkit >= 0.93
|
|
|
|
%else
|
2007-12-06 02:21:27 +08:00
|
|
|
Requires: PolicyKit >= 0.6
|
|
|
|
%endif
|
2009-08-06 20:54:08 +08:00
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%if %{with_storage_fs}
|
2008-02-20 23:42:30 +08:00
|
|
|
# For mount/umount in FS driver
|
|
|
|
BuildRequires: util-linux
|
2008-08-28 04:05:58 +08:00
|
|
|
# For showmount in FS driver (netfs discovery)
|
|
|
|
BuildRequires: nfs-utils
|
|
|
|
Requires: nfs-utils
|
2009-07-08 17:46:25 +08:00
|
|
|
# For glusterfs
|
2009-09-02 04:19:38 +08:00
|
|
|
%if 0%{?fedora} >= 11
|
2009-07-28 18:00:31 +08:00
|
|
|
Requires: glusterfs-client >= 2.0.1
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
2009-09-02 04:19:38 +08:00
|
|
|
%endif
|
2008-02-20 23:42:30 +08:00
|
|
|
%if %{with_qemu}
|
|
|
|
# From QEMU RPMs
|
|
|
|
Requires: /usr/bin/qemu-img
|
2009-09-09 22:44:44 +08:00
|
|
|
# For image compression
|
|
|
|
Requires: gzip
|
|
|
|
Requires: bzip2
|
2009-09-10 17:13:33 +08:00
|
|
|
Requires: lzop
|
2009-09-09 22:44:44 +08:00
|
|
|
Requires: xz
|
2008-02-20 23:42:30 +08:00
|
|
|
%else
|
2008-06-13 00:10:50 +08:00
|
|
|
%if %{with_xen}
|
2008-02-20 23:42:30 +08:00
|
|
|
# From Xen RPMs
|
|
|
|
Requires: /usr/sbin/qcow-create
|
|
|
|
%endif
|
2008-06-13 00:10:50 +08:00
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%if %{with_storage_lvm}
|
2008-02-20 23:45:33 +08:00
|
|
|
# For LVM drivers
|
|
|
|
Requires: lvm2
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_storage_iscsi}
|
2008-02-20 23:49:25 +08:00
|
|
|
# For ISCSI driver
|
|
|
|
Requires: iscsi-initiator-utils
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_storage_disk}
|
2008-02-20 23:52:17 +08:00
|
|
|
# For disk driver
|
|
|
|
Requires: parted
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
2009-09-08 22:07:54 +08:00
|
|
|
%if %{with_storage_mpath}
|
|
|
|
# For multipath support
|
|
|
|
Requires: device-mapper
|
|
|
|
%endif
|
2008-06-13 00:10:50 +08:00
|
|
|
%if %{with_xen}
|
2006-07-24 22:32:03 +08:00
|
|
|
BuildRequires: xen-devel
|
2008-06-13 00:10:50 +08:00
|
|
|
%endif
|
2009-06-25 01:32:56 +08:00
|
|
|
%if %{with_one}
|
|
|
|
BuildRequires: xmlrpc-c-devel >= 1.14.0
|
|
|
|
%endif
|
2006-02-23 19:35:37 +08:00
|
|
|
BuildRequires: libxml2-devel
|
2008-08-20 21:16:29 +08:00
|
|
|
BuildRequires: xhtml1-dtds
|
2006-03-04 16:57:22 +08:00
|
|
|
BuildRequires: readline-devel
|
2006-07-14 06:27:31 +08:00
|
|
|
BuildRequires: ncurses-devel
|
2006-09-21 23:24:37 +08:00
|
|
|
BuildRequires: gettext
|
2007-06-11 21:24:45 +08:00
|
|
|
BuildRequires: gnutls-devel
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_hal}
|
2008-11-26 22:46:49 +08:00
|
|
|
BuildRequires: hal-devel
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2009-11-20 23:45:46 +08:00
|
|
|
%if %{with_udev}
|
|
|
|
BuildRequires: libudev-devel >= 145
|
|
|
|
BuildRequires: libpciaccess-devel >= 0.10.9
|
|
|
|
%endif
|
2009-11-04 02:59:18 +08:00
|
|
|
%if %{with_yajl}
|
|
|
|
BuildRequires: yajl-devel
|
|
|
|
%endif
|
nwfilter: Support for learning a VM's IP address
This patch implements support for learning a VM's IP address. It uses
the pcap library to listen on the VM's backend network interface (tap)
or the physical ethernet device (macvtap) and tries to capture packets
with source or destination MAC address of the VM and learn from DHCP
Offers, ARP traffic, or first-sent IPv4 packet what the IP address of
the VM's interface is. This then allows to instantiate the network
traffic filtering rules without the user having to provide the IP
parameter somewhere in the filter description or in the interface
description as a parameter. This only supports to detect the parameter
IP, which is for the assumed single IPv4 address of a VM. There is not
support for interfaces that may have multiple IP addresses (IP
aliasing) or IPv6 that may then require more than one valid IP address
to be detected. A VM can have multiple independent interfaces that each
uses a different IP address and in that case it will be attempted to
detect each one of the address independently.
So, when for example an interface description in the domain XML has
looked like this up to now:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'>
<parameter name='IP' value='10.2.3.4'/>
</filterref>
</interface>
you may omit the IP parameter:
<interface type='bridge'>
<source bridge='mybridge'/>
<model type='virtio'/>
<filterref filter='clean-traffic'/>
</interface>
Internally I am walking the 'tree' of a VM's referenced network filters
and determine with the given variables which variables are missing. Now,
the above IP parameter may be missing and this causes a libvirt-internal
thread to be started that uses the pcap library's API to listen to the
backend interface (in case of macvtap to the physical interface) in an
attempt to determine the missing IP parameter. If the backend interface
disappears the thread terminates assuming the VM was brought down. In
case of a macvtap device a timeout is being used to wait for packets
from the given VM (filtering by VM's interface MAC address). If the VM's
macvtap device disappeared the thread also terminates. In all other
cases it tries to determine the IP address of the VM and will then apply
the rules late on the given interface, which would have happened
immediately if the IP parameter had been explicitly given. In case an
error happens while the firewall rules are applied, the VM's backend
interface is 'down'ed preventing it to communicate. Reasons for failure
for applying the network firewall rules may that an ebtables/iptables
command failes or OOM errors. Essentially the same failure reasons may
occur as when the firewall rules are applied immediately on VM start,
except that due to the late application of the filtering rules the VM
now is already running and cannot be hindered anymore from starting.
Bringing down the whole VM would probably be considered too drastic.
While a VM's IP address is attempted to be determined only limited
updates to network filters are allowed. In particular it is prevented
that filters are modified in such a way that they would introduce new
variables.
A caveat: The algorithm does not know which one is the appropriate IP
address of a VM. If the VM spoofs an IP address in its first ARP traffic
or IPv4 packets its filtering rules will be instantiated for this IP
address, thus 'locking' it to the found IP address. So, it's still
'safer' to explicitly provide the IP address of a VM's interface in the
filter description if it is known beforehand.
* configure.ac: detect libpcap
* libvirt.spec.in: require libpcap[-devel] if qemu is built
* src/internal.h: add the new ATTRIBUTE_PACKED define
* src/Makefile.am src/libvirt_private.syms: add the new modules and symbols
* src/nwfilter/nwfilter_learnipaddr.[ch]: new module being added
* src/nwfilter/nwfilter_driver.c src/conf/nwfilter_conf.[ch]
src/nwfilter/nwfilter_ebiptables_driver.[ch]
src/nwfilter/nwfilter_gentech_driver.[ch]: plu the new functionality in
* tests/nwfilterxml2xmltest: extend testing
2010-04-08 05:02:18 +08:00
|
|
|
%if %{with_libpcap}
|
|
|
|
BuildRequires: libpcap-devel
|
|
|
|
%endif
|
2010-05-26 03:31:38 +08:00
|
|
|
%if %{with_libnl}
|
|
|
|
BuildRequires: libnl-devel
|
|
|
|
%endif
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_avahi}
|
2007-09-19 09:56:55 +08:00
|
|
|
BuildRequires: avahi-devel
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_selinux}
|
2008-02-20 23:38:29 +08:00
|
|
|
BuildRequires: libselinux-devel
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_network}
|
2010-08-12 02:25:09 +08:00
|
|
|
BuildRequires: dnsmasq >= 2.41
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2007-09-21 02:40:36 +08:00
|
|
|
BuildRequires: bridge-utils
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_sasl}
|
2008-06-13 00:10:50 +08:00
|
|
|
BuildRequires: cyrus-sasl-devel
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2007-12-06 02:21:27 +08:00
|
|
|
%if %{with_polkit}
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
2009-08-06 20:54:08 +08:00
|
|
|
# Only need the binary, not -devel
|
|
|
|
BuildRequires: polkit >= 0.93
|
|
|
|
%else
|
2007-12-06 02:21:27 +08:00
|
|
|
BuildRequires: PolicyKit-devel >= 0.6
|
|
|
|
%endif
|
2009-08-06 20:54:08 +08:00
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%if %{with_storage_fs}
|
2008-02-20 23:42:30 +08:00
|
|
|
# For mount/umount in FS driver
|
|
|
|
BuildRequires: util-linux
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
2008-02-20 23:42:30 +08:00
|
|
|
%if %{with_qemu}
|
|
|
|
# From QEMU RPMs
|
|
|
|
BuildRequires: /usr/bin/qemu-img
|
|
|
|
%else
|
2008-06-13 00:10:50 +08:00
|
|
|
%if %{with_xen}
|
2008-02-20 23:42:30 +08:00
|
|
|
# From Xen RPMs
|
|
|
|
BuildRequires: /usr/sbin/qcow-create
|
|
|
|
%endif
|
2008-06-13 00:10:50 +08:00
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%if %{with_storage_lvm}
|
2008-02-20 23:45:33 +08:00
|
|
|
# For LVM drivers
|
|
|
|
BuildRequires: lvm2
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_storage_iscsi}
|
2008-02-20 23:49:25 +08:00
|
|
|
# For ISCSI driver
|
|
|
|
BuildRequires: iscsi-initiator-utils
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_storage_disk}
|
2008-02-20 23:52:17 +08:00
|
|
|
# For disk driver
|
|
|
|
BuildRequires: parted-devel
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?rhel} == 5
|
|
|
|
# Broken RHEL-5 parted RPM is missing a dep
|
|
|
|
BuildRequires: e2fsprogs-devel
|
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
2009-09-08 22:07:54 +08:00
|
|
|
%if %{with_storage_mpath}
|
|
|
|
# For Multipath support
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?rhel} == 5
|
|
|
|
# Broken RHEL-5 packaging has header files in main RPM :-(
|
|
|
|
BuildRequires: device-mapper
|
|
|
|
%else
|
2009-09-08 22:07:54 +08:00
|
|
|
BuildRequires: device-mapper-devel
|
|
|
|
%endif
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2009-03-31 20:45:07 +08:00
|
|
|
%if %{with_numactl}
|
2008-11-28 19:20:27 +08:00
|
|
|
# For QEMU/LXC numa info
|
|
|
|
BuildRequires: numactl-devel
|
2009-03-31 20:45:07 +08:00
|
|
|
%endif
|
2009-06-29 19:33:13 +08:00
|
|
|
%if %{with_capng}
|
2009-07-29 01:30:20 +08:00
|
|
|
BuildRequires: libcap-ng-devel >= 0.5.0
|
2009-06-29 19:33:13 +08:00
|
|
|
%endif
|
2009-07-24 22:26:54 +08:00
|
|
|
%if %{with_phyp}
|
2009-09-04 20:03:45 +08:00
|
|
|
BuildRequires: libssh2-devel
|
2009-07-24 22:26:54 +08:00
|
|
|
%endif
|
2009-07-29 00:30:48 +08:00
|
|
|
%if %{with_netcf}
|
2009-11-21 02:43:59 +08:00
|
|
|
BuildRequires: netcf-devel >= 0.1.4
|
2009-07-29 00:30:48 +08:00
|
|
|
%endif
|
2010-05-04 22:13:55 +08:00
|
|
|
%if %{with_esx}
|
|
|
|
BuildRequires: libcurl-devel
|
|
|
|
%endif
|
2010-09-15 21:44:11 +08:00
|
|
|
%if %{with_audit}
|
|
|
|
BuildRequires: audit-libs-devel
|
|
|
|
%endif
|
2008-06-13 00:10:50 +08:00
|
|
|
|
|
|
|
# Fedora build root suckage
|
|
|
|
BuildRequires: gawk
|
2005-11-02 23:37:34 +08:00
|
|
|
|
|
|
|
%description
|
2008-01-24 18:15:13 +08:00
|
|
|
Libvirt is a C toolkit to interact with the virtualization capabilities
|
2009-07-21 17:16:15 +08:00
|
|
|
of recent versions of Linux (and other OSes). The main package includes
|
|
|
|
the libvirtd server exporting the virtualization support.
|
|
|
|
|
|
|
|
%package client
|
2009-07-29 16:57:24 +08:00
|
|
|
Summary: Client side library and utilities of the libvirt library
|
2009-07-21 17:16:15 +08:00
|
|
|
Group: Development/Libraries
|
|
|
|
Requires: readline
|
|
|
|
Requires: ncurses
|
|
|
|
# So remote clients can access libvirt over SSH tunnel
|
|
|
|
# (client invokes 'nc' against the UNIX socket on the server)
|
|
|
|
Requires: nc
|
|
|
|
%if %{with_sasl}
|
|
|
|
Requires: cyrus-sasl
|
|
|
|
# Not technically required, but makes 'out-of-box' config
|
|
|
|
# work correctly & doesn't have onerous dependencies
|
|
|
|
Requires: cyrus-sasl-md5
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%description client
|
|
|
|
Shared libraries and client binaries needed to access to the
|
|
|
|
virtualization capabilities of recent versions of Linux (and other OSes).
|
2005-11-02 23:37:34 +08:00
|
|
|
|
|
|
|
%package devel
|
2006-02-10 01:45:11 +08:00
|
|
|
Summary: Libraries, includes, etc. to compile with the libvirt library
|
2005-11-02 23:37:34 +08:00
|
|
|
Group: Development/Libraries
|
2010-05-04 22:13:55 +08:00
|
|
|
Requires: %{name}-client = %{version}-%{release}
|
2006-11-08 00:28:16 +08:00
|
|
|
Requires: pkgconfig
|
2008-06-13 00:10:50 +08:00
|
|
|
%if %{with_xen}
|
|
|
|
Requires: xen-devel
|
|
|
|
%endif
|
2005-11-02 23:37:34 +08:00
|
|
|
|
|
|
|
%description devel
|
2006-02-10 01:45:11 +08:00
|
|
|
Includes and documentations for the C library providing an API to use
|
2007-03-28 16:48:52 +08:00
|
|
|
the virtualization capabilities of recent versions of Linux (and other OSes).
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_python}
|
2005-12-20 00:34:11 +08:00
|
|
|
%package python
|
2006-02-10 01:45:11 +08:00
|
|
|
Summary: Python bindings for the libvirt library
|
2005-12-20 00:34:11 +08:00
|
|
|
Group: Development/Libraries
|
2010-05-04 22:13:55 +08:00
|
|
|
Requires: %{name}-client = %{version}-%{release}
|
2005-12-20 00:34:11 +08:00
|
|
|
|
|
|
|
%description python
|
2006-02-10 01:45:11 +08:00
|
|
|
The libvirt-python package contains a module that permits applications
|
2005-12-20 00:34:11 +08:00
|
|
|
written in the Python programming language to use the interface
|
2008-02-06 03:27:37 +08:00
|
|
|
supplied by the libvirt library to use the virtualization capabilities
|
2007-03-28 16:48:52 +08:00
|
|
|
of recent versions of Linux (and other OSes).
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2005-12-20 00:34:11 +08:00
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
%prep
|
|
|
|
%setup -q
|
|
|
|
|
|
|
|
%build
|
2008-06-13 00:10:50 +08:00
|
|
|
%if ! %{with_xen}
|
|
|
|
%define _without_xen --without-xen
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_qemu}
|
|
|
|
%define _without_qemu --without-qemu
|
|
|
|
%endif
|
|
|
|
|
2008-08-21 17:28:54 +08:00
|
|
|
%if ! %{with_openvz}
|
|
|
|
%define _without_openvz --without-openvz
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_lxc}
|
|
|
|
%define _without_lxc --without-lxc
|
|
|
|
%endif
|
|
|
|
|
2009-07-29 00:59:34 +08:00
|
|
|
%if ! %{with_vbox}
|
|
|
|
%define _without_vbox --without-vbox
|
|
|
|
%endif
|
|
|
|
|
2010-10-15 01:46:41 +08:00
|
|
|
%if ! %{with_xenapi}
|
|
|
|
%define _without_xenapi --without-xenapi
|
|
|
|
%endif
|
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if ! %{with_sasl}
|
|
|
|
%define _without_sasl --without-sasl
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_avahi}
|
|
|
|
%define _without_avahi --without-avahi
|
|
|
|
%endif
|
|
|
|
|
2009-07-24 22:26:54 +08:00
|
|
|
%if ! %{with_phyp}
|
|
|
|
%define _without_phyp --without-phyp
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if ! %{with_esx}
|
|
|
|
%define _without_esx --without-esx
|
|
|
|
%endif
|
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if ! %{with_polkit}
|
|
|
|
%define _without_polkit --without-polkit
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_python}
|
|
|
|
%define _without_python --without-python
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_libvirtd}
|
|
|
|
%define _without_libvirtd --without-libvirtd
|
|
|
|
%endif
|
|
|
|
|
2008-11-21 18:09:08 +08:00
|
|
|
%if ! %{with_uml}
|
|
|
|
%define _without_uml --without-uml
|
|
|
|
%endif
|
|
|
|
|
2009-06-25 01:32:56 +08:00
|
|
|
%if ! %{with_one}
|
|
|
|
%define _without_one --without-one
|
|
|
|
%endif
|
|
|
|
|
2009-01-21 01:27:34 +08:00
|
|
|
%if %{with_rhel5}
|
|
|
|
%define _with_rhel5_api --with-rhel5-api
|
|
|
|
%endif
|
|
|
|
|
2009-01-21 06:36:10 +08:00
|
|
|
%if ! %{with_network}
|
|
|
|
%define _without_network --without-network
|
|
|
|
%endif
|
|
|
|
|
2009-03-31 20:45:07 +08:00
|
|
|
%if ! %{with_storage_fs}
|
|
|
|
%define _without_storage_fs --without-storage-fs
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_storage_lvm}
|
|
|
|
%define _without_storage_lvm --without-storage-lvm
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_storage_iscsi}
|
|
|
|
%define _without_storage_iscsi --without-storage-iscsi
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_storage_disk}
|
|
|
|
%define _without_storage_disk --without-storage-disk
|
|
|
|
%endif
|
|
|
|
|
2009-09-08 22:07:54 +08:00
|
|
|
%if ! %{with_storage_mpath}
|
|
|
|
%define _without_storage_mpath --without-storage-mpath
|
|
|
|
%endif
|
|
|
|
|
2009-03-31 20:45:07 +08:00
|
|
|
%if ! %{with_numactl}
|
|
|
|
%define _without_numactl --without-numactl
|
|
|
|
%endif
|
|
|
|
|
2009-07-29 00:35:32 +08:00
|
|
|
%if ! %{with_capng}
|
|
|
|
%define _without_capng --without-capng
|
|
|
|
%endif
|
|
|
|
|
2009-07-29 00:30:48 +08:00
|
|
|
%if ! %{with_netcf}
|
|
|
|
%define _without_netcf --without-netcf
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if ! %{with_selinux}
|
|
|
|
%define _without_selinux --without-selinux
|
|
|
|
%endif
|
|
|
|
|
|
|
|
%if ! %{with_hal}
|
|
|
|
%define _without_hal --without-hal
|
|
|
|
%endif
|
|
|
|
|
2009-11-20 23:45:46 +08:00
|
|
|
%if ! %{with_udev}
|
|
|
|
%define _without_udev --without-udev
|
|
|
|
%endif
|
|
|
|
|
2009-11-04 02:59:18 +08:00
|
|
|
%if ! %{with_yajl}
|
|
|
|
%define _without_yajl --without-yajl
|
|
|
|
%endif
|
|
|
|
|
2010-05-06 00:20:28 +08:00
|
|
|
%if ! %{with_libpcap}
|
|
|
|
%define _without_libpcap --without-libpcap
|
|
|
|
%endif
|
|
|
|
|
2010-05-26 03:31:38 +08:00
|
|
|
%if ! %{with_macvtap}
|
|
|
|
%define _without_macvtap --without-macvtap
|
|
|
|
%endif
|
|
|
|
|
2010-09-15 21:44:11 +08:00
|
|
|
%if ! %{with_audit}
|
|
|
|
%define _without_audit --without-audit
|
|
|
|
%endif
|
|
|
|
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%if ! %{with_dtrace}
|
|
|
|
%define _without_dtrace --without-dtrace
|
|
|
|
%endif
|
|
|
|
|
2008-06-13 00:10:50 +08:00
|
|
|
%configure %{?_without_xen} \
|
|
|
|
%{?_without_qemu} \
|
2008-08-21 17:28:54 +08:00
|
|
|
%{?_without_openvz} \
|
|
|
|
%{?_without_lxc} \
|
2009-07-29 00:59:34 +08:00
|
|
|
%{?_without_vbox} \
|
2010-10-15 01:46:41 +08:00
|
|
|
%{?_without_xenapi} \
|
2008-09-17 22:09:13 +08:00
|
|
|
%{?_without_sasl} \
|
|
|
|
%{?_without_avahi} \
|
|
|
|
%{?_without_polkit} \
|
|
|
|
%{?_without_python} \
|
|
|
|
%{?_without_libvirtd} \
|
2008-11-21 18:09:08 +08:00
|
|
|
%{?_without_uml} \
|
2009-06-25 01:32:56 +08:00
|
|
|
%{?_without_one} \
|
2009-07-24 22:26:54 +08:00
|
|
|
%{?_without_phyp} \
|
2009-09-16 23:02:38 +08:00
|
|
|
%{?_without_esx} \
|
2009-01-21 06:36:10 +08:00
|
|
|
%{?_without_network} \
|
2009-01-21 01:27:34 +08:00
|
|
|
%{?_with_rhel5_api} \
|
2009-03-31 20:45:07 +08:00
|
|
|
%{?_without_storage_fs} \
|
|
|
|
%{?_without_storage_lvm} \
|
|
|
|
%{?_without_storage_iscsi} \
|
|
|
|
%{?_without_storage_disk} \
|
2009-09-08 22:07:54 +08:00
|
|
|
%{?_without_storage_mpath} \
|
2009-03-31 20:45:07 +08:00
|
|
|
%{?_without_numactl} \
|
2009-07-29 00:35:32 +08:00
|
|
|
%{?_without_capng} \
|
2009-07-29 00:30:48 +08:00
|
|
|
%{?_without_netcf} \
|
2009-09-16 23:02:38 +08:00
|
|
|
%{?_without_selinux} \
|
|
|
|
%{?_without_hal} \
|
2009-11-20 23:45:46 +08:00
|
|
|
%{?_without_udev} \
|
2009-11-04 02:59:18 +08:00
|
|
|
%{?_without_yajl} \
|
2010-05-06 00:20:28 +08:00
|
|
|
%{?_without_libpcap} \
|
2010-05-26 03:31:38 +08:00
|
|
|
%{?_without_macvtap} \
|
2010-09-15 21:44:11 +08:00
|
|
|
%{?_without_audit} \
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%{?_without_dtrace} \
|
2009-07-16 05:25:01 +08:00
|
|
|
--with-qemu-user=%{qemu_user} \
|
|
|
|
--with-qemu-group=%{qemu_group} \
|
2008-06-13 00:10:50 +08:00
|
|
|
--with-init-script=redhat \
|
2009-07-16 23:28:41 +08:00
|
|
|
--with-remote-pid-file=%{_localstatedir}/run/libvirtd.pid
|
2008-08-28 17:08:44 +08:00
|
|
|
make %{?_smp_mflags}
|
2009-07-21 17:16:15 +08:00
|
|
|
gzip -9 ChangeLog
|
2005-11-02 23:37:34 +08:00
|
|
|
|
|
|
|
%install
|
|
|
|
rm -fr %{buildroot}
|
|
|
|
|
|
|
|
%makeinstall
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
for i in domain-events/events-c dominfo domsuspend hellolibvirt openauth python xml/nwfilter systemtap
|
2009-09-16 20:07:48 +08:00
|
|
|
do
|
|
|
|
(cd examples/$i ; make clean ; rm -rf .deps .libs Makefile Makefile.in)
|
|
|
|
done
|
2005-11-02 23:37:34 +08:00
|
|
|
rm -f $RPM_BUILD_ROOT%{_libdir}/*.la
|
2005-12-16 21:27:23 +08:00
|
|
|
rm -f $RPM_BUILD_ROOT%{_libdir}/*.a
|
2005-12-20 00:34:11 +08:00
|
|
|
rm -f $RPM_BUILD_ROOT%{_libdir}/python*/site-packages/*.la
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_libdir}/python*/site-packages/*.a
|
2007-03-16 01:51:11 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_network}
|
2010-04-28 21:38:47 +08:00
|
|
|
install -d -m 0755 $RPM_BUILD_ROOT%{_datadir}/lib/libvirt/dnsmasq/
|
2007-03-16 01:51:11 +08:00
|
|
|
# We don't want to install /etc/libvirt/qemu/networks in the main %files list
|
|
|
|
# because if the admin wants to delete the default network completely, we don't
|
|
|
|
# want to end up re-incarnating it on every RPM upgrade.
|
|
|
|
install -d -m 0755 $RPM_BUILD_ROOT%{_datadir}/libvirt/networks/
|
|
|
|
cp $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu/networks/default.xml \
|
|
|
|
$RPM_BUILD_ROOT%{_datadir}/libvirt/networks/default.xml
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu/networks/default.xml
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu/networks/autostart/default.xml
|
2007-03-13 00:32:43 +08:00
|
|
|
# Strip auto-generated UUID - we need it generated per-install
|
2007-03-16 01:51:11 +08:00
|
|
|
sed -i -e "/<uuid>/d" $RPM_BUILD_ROOT%{_datadir}/libvirt/networks/default.xml
|
2008-11-26 22:46:49 +08:00
|
|
|
%else
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu/networks/default.xml
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu/networks/autostart/default.xml
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
|
|
|
%if ! %{with_qemu}
|
2008-11-26 22:46:49 +08:00
|
|
|
rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/libvirtd_qemu.aug
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/tests/test_libvirtd_qemu.aug
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2006-09-21 23:24:37 +08:00
|
|
|
%find_lang %{name}
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2009-10-09 00:06:40 +08:00
|
|
|
%if ! %{with_lxc}
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/libvirtd_lxc.aug
|
|
|
|
rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/tests/test_libvirtd_lxc.aug
|
2009-10-13 22:18:45 +08:00
|
|
|
%endif
|
2009-10-09 00:06:40 +08:00
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if ! %{with_python}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/libvirt-python-%{version}
|
|
|
|
%endif
|
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{client_only}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/libvirt-%{version}
|
|
|
|
%endif
|
|
|
|
|
2010-05-04 22:13:55 +08:00
|
|
|
%if ! %{with_libvirtd}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/nwfilter
|
|
|
|
%endif
|
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if ! %{with_qemu}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu.conf
|
2010-03-18 20:50:08 +08:00
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/libvirtd.qemu
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2009-10-08 23:40:14 +08:00
|
|
|
%if ! %{with_lxc}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/lxc.conf
|
2010-04-13 16:40:21 +08:00
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/libvirtd.lxc
|
2010-03-18 20:50:08 +08:00
|
|
|
%endif
|
|
|
|
%if ! %{with_uml}
|
|
|
|
rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/libvirtd.uml
|
2009-10-08 23:40:14 +08:00
|
|
|
%endif
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
%clean
|
|
|
|
rm -fr %{buildroot}
|
|
|
|
|
2010-04-13 02:39:00 +08:00
|
|
|
%check
|
|
|
|
cd tests
|
|
|
|
# These 3 tests don't current work in a mock build root
|
|
|
|
for i in nodeinfotest daemon-conf seclabeltest
|
|
|
|
do
|
|
|
|
rm -f $i
|
2010-05-27 05:06:09 +08:00
|
|
|
printf "#!/bin/sh\nexit 0\n" > $i
|
2010-04-13 02:39:00 +08:00
|
|
|
chmod +x $i
|
|
|
|
done
|
|
|
|
make check
|
|
|
|
|
2009-07-30 19:26:58 +08:00
|
|
|
%pre
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
2009-07-30 19:26:58 +08:00
|
|
|
# Normally 'setup' adds this in /etc/passwd, but this is
|
2009-09-16 23:02:38 +08:00
|
|
|
# here for case of upgrades from earlier Fedora/RHEL. This
|
2009-07-30 19:26:58 +08:00
|
|
|
# UID/GID pair is reserved for qemu:qemu
|
|
|
|
getent group kvm >/dev/null || groupadd -g 36 -r kvm
|
|
|
|
getent group qemu >/dev/null || groupadd -g 107 -r qemu
|
|
|
|
getent passwd qemu >/dev/null || \
|
|
|
|
useradd -r -u 107 -g qemu -G kvm -d / -s /sbin/nologin \
|
|
|
|
-c "qemu user" qemu
|
|
|
|
%endif
|
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
%post
|
2007-03-16 01:51:11 +08:00
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_libvirtd}
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_network}
|
2007-03-16 01:51:11 +08:00
|
|
|
# We want to install the default network for initial RPM installs
|
|
|
|
# or on the first upgrade from a non-network aware libvirt only.
|
|
|
|
# We check this by looking to see if the daemon is already installed
|
|
|
|
/sbin/chkconfig --list libvirtd 1>/dev/null 2>&1
|
2010-04-01 04:58:40 +08:00
|
|
|
if test $? != 0 && test ! -f %{_sysconfdir}/libvirt/qemu/networks/default.xml
|
2007-03-16 01:51:11 +08:00
|
|
|
then
|
2007-03-13 00:32:43 +08:00
|
|
|
UUID=`/usr/bin/uuidgen`
|
2007-03-16 01:51:11 +08:00
|
|
|
sed -e "s,</name>,</name>\n <uuid>$UUID</uuid>," \
|
|
|
|
< %{_datadir}/libvirt/networks/default.xml \
|
|
|
|
> %{_sysconfdir}/libvirt/qemu/networks/default.xml
|
|
|
|
ln -s ../default.xml %{_sysconfdir}/libvirt/qemu/networks/autostart/default.xml
|
2007-03-13 00:32:43 +08:00
|
|
|
fi
|
2008-11-26 22:46:49 +08:00
|
|
|
%endif
|
2007-02-23 23:53:56 +08:00
|
|
|
|
2007-03-16 01:51:11 +08:00
|
|
|
/sbin/chkconfig --add libvirtd
|
2009-09-11 21:05:20 +08:00
|
|
|
if [ "$1" -ge "1" ]; then
|
|
|
|
/sbin/service libvirtd condrestart > /dev/null 2>&1
|
|
|
|
fi
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2007-03-16 01:51:11 +08:00
|
|
|
|
2007-02-23 23:53:56 +08:00
|
|
|
%preun
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_libvirtd}
|
2007-02-23 23:53:56 +08:00
|
|
|
if [ $1 = 0 ]; then
|
|
|
|
/sbin/service libvirtd stop 1>/dev/null 2>&1
|
|
|
|
/sbin/chkconfig --del libvirtd
|
|
|
|
fi
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2010-05-27 20:47:11 +08:00
|
|
|
%preun client
|
|
|
|
|
|
|
|
if [ $1 = 0 ]; then
|
|
|
|
/sbin/chkconfig --del libvirt-guests
|
|
|
|
rm -f /var/lib/libvirt/libvirt-guests
|
|
|
|
fi
|
|
|
|
|
|
|
|
%post client
|
|
|
|
|
|
|
|
/sbin/ldconfig
|
|
|
|
/sbin/chkconfig --add libvirt-guests
|
|
|
|
if [ $1 -ge 1 ]; then
|
|
|
|
# this doesn't do anything but allowing for libvirt-guests to be
|
|
|
|
# stopped on the first shutdown
|
|
|
|
/sbin/service libvirt-guests start > /dev/null 2>&1 || true
|
|
|
|
fi
|
2009-07-29 16:55:43 +08:00
|
|
|
|
|
|
|
%postun client -p /sbin/ldconfig
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_libvirtd}
|
2009-07-21 17:16:15 +08:00
|
|
|
%files
|
2005-11-02 23:37:34 +08:00
|
|
|
%defattr(-, root, root)
|
|
|
|
|
2009-07-21 17:16:15 +08:00
|
|
|
%doc AUTHORS ChangeLog.gz NEWS README COPYING.LIB TODO
|
2007-03-13 00:32:43 +08:00
|
|
|
%dir %attr(0700, root, root) %{_sysconfdir}/libvirt/
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2009-09-16 23:02:38 +08:00
|
|
|
%if %{with_network}
|
2007-03-13 00:32:43 +08:00
|
|
|
%dir %attr(0700, root, root) %{_sysconfdir}/libvirt/qemu/
|
|
|
|
%dir %attr(0700, root, root) %{_sysconfdir}/libvirt/qemu/networks/
|
2007-03-20 22:49:43 +08:00
|
|
|
%dir %attr(0700, root, root) %{_sysconfdir}/libvirt/qemu/networks/autostart
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
|
|
|
|
2010-03-31 16:20:22 +08:00
|
|
|
%dir %attr(0700, root, root) %{_sysconfdir}/libvirt/nwfilter/
|
|
|
|
%{_sysconfdir}/libvirt/nwfilter/*.xml
|
|
|
|
|
2007-02-23 23:53:56 +08:00
|
|
|
%{_sysconfdir}/rc.d/init.d/libvirtd
|
2007-06-27 07:48:46 +08:00
|
|
|
%config(noreplace) %{_sysconfdir}/sysconfig/libvirtd
|
2007-10-13 03:54:15 +08:00
|
|
|
%config(noreplace) %{_sysconfdir}/libvirt/libvirtd.conf
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%if %{with_dtrace}
|
|
|
|
%{_datadir}/systemtap/tapsets/libvirtd.stp
|
|
|
|
%endif
|
2009-10-06 19:33:17 +08:00
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/log/libvirt/qemu/
|
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/log/libvirt/lxc/
|
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/log/libvirt/uml/
|
2008-09-17 22:09:13 +08:00
|
|
|
|
|
|
|
%if %{with_qemu}
|
2007-10-13 03:54:15 +08:00
|
|
|
%config(noreplace) %{_sysconfdir}/libvirt/qemu.conf
|
2010-03-04 22:17:08 +08:00
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/libvirtd.qemu
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2009-10-08 23:40:14 +08:00
|
|
|
%if %{with_lxc}
|
|
|
|
%config(noreplace) %{_sysconfdir}/libvirt/lxc.conf
|
2010-03-04 22:17:08 +08:00
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/libvirtd.lxc
|
|
|
|
%endif
|
|
|
|
%if %{with_uml}
|
|
|
|
%config(noreplace) %{_sysconfdir}/logrotate.d/libvirtd.uml
|
2009-10-08 23:40:14 +08:00
|
|
|
%endif
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2007-03-16 01:51:11 +08:00
|
|
|
%dir %{_datadir}/libvirt/
|
2009-09-16 23:02:38 +08:00
|
|
|
|
|
|
|
%if %{with_network}
|
2007-03-16 01:51:11 +08:00
|
|
|
%dir %{_datadir}/libvirt/networks/
|
|
|
|
%{_datadir}/libvirt/networks/default.xml
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
|
|
|
|
2007-03-13 00:32:43 +08:00
|
|
|
%dir %{_localstatedir}/run/libvirt/
|
2009-01-21 06:36:10 +08:00
|
|
|
|
2009-07-31 16:49:08 +08:00
|
|
|
%dir %attr(0711, root, root) %{_localstatedir}/lib/libvirt/images/
|
2009-08-06 22:20:36 +08:00
|
|
|
%dir %attr(0711, root, root) %{_localstatedir}/lib/libvirt/boot/
|
2009-05-06 21:27:54 +08:00
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/cache/libvirt/
|
2008-09-17 22:09:13 +08:00
|
|
|
|
|
|
|
%if %{with_qemu}
|
2009-08-25 23:49:09 +08:00
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/run/libvirt/qemu/
|
2010-10-19 00:21:15 +08:00
|
|
|
%dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/
|
|
|
|
%dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/cache/libvirt/qemu/
|
2009-01-21 06:36:10 +08:00
|
|
|
%endif
|
|
|
|
%if %{with_lxc}
|
|
|
|
%dir %{_localstatedir}/run/libvirt/lxc/
|
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/lib/libvirt/lxc/
|
|
|
|
%endif
|
|
|
|
%if %{with_uml}
|
|
|
|
%dir %{_localstatedir}/run/libvirt/uml/
|
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/lib/libvirt/uml/
|
|
|
|
%endif
|
|
|
|
%if %{with_network}
|
|
|
|
%dir %{_localstatedir}/run/libvirt/network/
|
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/lib/libvirt/network/
|
2010-04-28 21:38:47 +08:00
|
|
|
%dir %attr(0755, root, root) %{_localstatedir}/lib/libvirt/dnsmasq/
|
2009-01-21 06:36:10 +08:00
|
|
|
%endif
|
|
|
|
|
|
|
|
%if %{with_qemu}
|
2008-09-04 18:44:23 +08:00
|
|
|
%{_datadir}/augeas/lenses/libvirtd_qemu.aug
|
|
|
|
%{_datadir}/augeas/lenses/tests/test_libvirtd_qemu.aug
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
|
|
|
|
2009-10-09 00:06:40 +08:00
|
|
|
%if %{with_lxc}
|
|
|
|
%{_datadir}/augeas/lenses/libvirtd_lxc.aug
|
|
|
|
%{_datadir}/augeas/lenses/tests/test_libvirtd_lxc.aug
|
|
|
|
%endif
|
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%{_datadir}/augeas/lenses/libvirtd.aug
|
|
|
|
%{_datadir}/augeas/lenses/tests/test_libvirtd.aug
|
|
|
|
|
2007-12-06 23:35:54 +08:00
|
|
|
%if %{with_polkit}
|
2009-09-16 23:02:38 +08:00
|
|
|
%if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
|
2009-08-06 20:54:08 +08:00
|
|
|
%{_datadir}/polkit-1/actions/org.libvirt.unix.policy
|
|
|
|
%else
|
2008-07-11 17:51:25 +08:00
|
|
|
%{_datadir}/PolicyKit/policy/org.libvirt.unix.policy
|
2007-12-06 23:35:54 +08:00
|
|
|
%endif
|
2009-08-06 20:54:08 +08:00
|
|
|
%endif
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2009-07-29 02:07:51 +08:00
|
|
|
%dir %attr(0700, root, root) %{_localstatedir}/log/libvirt/
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2008-08-21 17:28:54 +08:00
|
|
|
%if %{with_lxc}
|
|
|
|
%attr(0755, root, root) %{_libexecdir}/libvirt_lxc
|
|
|
|
%endif
|
2008-09-17 22:09:13 +08:00
|
|
|
|
|
|
|
%attr(0755, root, root) %{_libexecdir}/libvirt_parthelper
|
2007-06-27 07:04:49 +08:00
|
|
|
%attr(0755, root, root) %{_sbindir}/libvirtd
|
2008-09-17 22:09:13 +08:00
|
|
|
|
2010-07-13 03:33:35 +08:00
|
|
|
%{_mandir}/man8/libvirtd.8*
|
|
|
|
|
2007-08-21 22:59:47 +08:00
|
|
|
%doc docs/*.xml
|
2009-09-16 23:02:38 +08:00
|
|
|
%endif
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2009-07-21 17:16:15 +08:00
|
|
|
%files client -f %{name}.lang
|
|
|
|
%defattr(-, root, root)
|
|
|
|
%doc AUTHORS ChangeLog.gz NEWS README COPYING.LIB TODO
|
|
|
|
|
|
|
|
%{_mandir}/man1/virsh.1*
|
|
|
|
%{_mandir}/man1/virt-xml-validate.1*
|
2009-09-16 21:42:57 +08:00
|
|
|
%{_mandir}/man1/virt-pki-validate.1*
|
2009-07-21 17:16:15 +08:00
|
|
|
%{_bindir}/virsh
|
|
|
|
%{_bindir}/virt-xml-validate
|
2009-09-16 21:42:57 +08:00
|
|
|
%{_bindir}/virt-pki-validate
|
2009-07-21 17:16:15 +08:00
|
|
|
%{_libdir}/lib*.so.*
|
|
|
|
|
|
|
|
%dir %{_datadir}/libvirt/
|
|
|
|
%dir %{_datadir}/libvirt/schemas/
|
|
|
|
|
|
|
|
%{_datadir}/libvirt/schemas/domain.rng
|
2010-05-27 05:03:47 +08:00
|
|
|
%{_datadir}/libvirt/schemas/domainsnapshot.rng
|
2009-07-21 17:16:15 +08:00
|
|
|
%{_datadir}/libvirt/schemas/network.rng
|
|
|
|
%{_datadir}/libvirt/schemas/storagepool.rng
|
|
|
|
%{_datadir}/libvirt/schemas/storagevol.rng
|
|
|
|
%{_datadir}/libvirt/schemas/nodedev.rng
|
|
|
|
%{_datadir}/libvirt/schemas/capability.rng
|
2009-07-25 00:20:50 +08:00
|
|
|
%{_datadir}/libvirt/schemas/interface.rng
|
2009-07-28 08:39:48 +08:00
|
|
|
%{_datadir}/libvirt/schemas/secret.rng
|
2009-08-20 03:50:10 +08:00
|
|
|
%{_datadir}/libvirt/schemas/storageencryption.rng
|
2010-04-06 23:09:46 +08:00
|
|
|
%{_datadir}/libvirt/schemas/nwfilter.rng
|
2009-07-21 17:16:15 +08:00
|
|
|
|
2009-12-23 21:28:42 +08:00
|
|
|
%{_datadir}/libvirt/cpu_map.xml
|
|
|
|
|
2010-05-14 21:37:55 +08:00
|
|
|
%{_sysconfdir}/rc.d/init.d/libvirt-guests
|
|
|
|
%config(noreplace) %{_sysconfdir}/sysconfig/libvirt-guests
|
2010-11-04 05:20:24 +08:00
|
|
|
%dir %attr(0755, root, root) %{_localstatedir}/lib/libvirt/
|
2010-05-14 21:37:55 +08:00
|
|
|
|
2009-07-21 17:16:15 +08:00
|
|
|
%if %{with_sasl}
|
|
|
|
%config(noreplace) %{_sysconfdir}/sasl2/libvirt.conf
|
|
|
|
%endif
|
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
%files devel
|
|
|
|
%defattr(-, root, root)
|
|
|
|
|
|
|
|
%{_libdir}/lib*.so
|
2007-03-28 16:48:52 +08:00
|
|
|
%dir %{_includedir}/libvirt
|
2006-02-10 01:45:11 +08:00
|
|
|
%{_includedir}/libvirt/*.h
|
|
|
|
%{_libdir}/pkgconfig/libvirt.pc
|
2009-05-06 21:27:54 +08:00
|
|
|
%dir %{_datadir}/gtk-doc/html/libvirt/
|
2006-02-22 18:54:54 +08:00
|
|
|
%doc %{_datadir}/gtk-doc/html/libvirt/*.devhelp
|
|
|
|
%doc %{_datadir}/gtk-doc/html/libvirt/*.html
|
|
|
|
%doc %{_datadir}/gtk-doc/html/libvirt/*.png
|
|
|
|
%doc %{_datadir}/gtk-doc/html/libvirt/*.css
|
2005-11-02 23:37:34 +08:00
|
|
|
|
2005-12-07 21:45:20 +08:00
|
|
|
%doc docs/*.html docs/html docs/*.gif
|
2006-02-10 01:45:11 +08:00
|
|
|
%doc docs/libvirt-api.xml
|
2009-09-16 20:07:48 +08:00
|
|
|
%doc examples/hellolibvirt
|
|
|
|
%doc examples/domain-events/events-c
|
|
|
|
%doc examples/dominfo
|
|
|
|
%doc examples/domsuspend
|
2010-07-06 20:59:50 +08:00
|
|
|
%doc examples/openauth
|
2009-09-17 02:02:59 +08:00
|
|
|
%doc examples/xml
|
Add dtrace static probes in libvirtd
Adds initial support for dtrace static probes in libvirtd
daemon, assuming use of systemtap dtrace compat shim on
Linux. The probes are inserted for network client connect,
disconnect, TLS handshake states and authentication protocol
states.
This can be tested by running the xample program and then
attempting to connect with any libvirt client (virsh,
virt-manager, etc).
# stap examples/systemtap/client.stp
Client fd=44 connected readonly=0
Client fd=44 auth polkit deny pid:24997,uid:500
Client fd=44 disconnected
Client fd=46 connected readonly=1
Client fd=46 auth sasl allow test
Client fd=46 disconnected
The libvirtd.stp file should also really not be required,
since it is duplicated info that is already available in
the main probes.d definition file. A script to autogenerate
the .stp file is needed, either in libvirtd tree, or better
as part of systemtap itself.
* Makefile.am: Add examples/systemtap subdir
* autobuild.sh: Disable dtrace for mingw32
* configure.ac: Add check for dtrace
* daemon/.gitignore: Ignore generated dtrace probe file
* daemon/Makefile.am: Build dtrace probe header & object
files
* daemon/libvirtd.stp: SystemTAP convenience probeset
* daemon/libvirtd.c: Add connect/disconnect & TLS probes
* daemon/remote.c: Add SASL and PolicyKit auth probes
* daemon/probes.d: Master probe definition
* daemon/libvirtd.h: Add convenience macro for probes
so that compilation is a no-op when dtrace is not available
* examples/systemtap/Makefile.am, examples/systemtap/client.stp
Example systemtap script using dtrace probe markers
* libvirt.spec.in: Enable dtrace on F13/RHEL6
* mingw32-libvirt.spec.in: Force disable dtrace
2010-09-15 00:30:32 +08:00
|
|
|
%doc examples/systemtap
|
2005-12-07 21:45:20 +08:00
|
|
|
|
2008-09-17 22:09:13 +08:00
|
|
|
%if %{with_python}
|
2005-12-20 00:34:11 +08:00
|
|
|
%files python
|
|
|
|
%defattr(-, root, root)
|
|
|
|
|
|
|
|
%doc AUTHORS NEWS README COPYING.LIB
|
2006-02-10 01:45:11 +08:00
|
|
|
%{_libdir}/python*/site-packages/libvirt.py*
|
|
|
|
%{_libdir}/python*/site-packages/libvirtmod*
|
2006-02-15 21:21:17 +08:00
|
|
|
%doc python/tests/*.py
|
2005-12-20 00:34:11 +08:00
|
|
|
%doc python/TODO
|
2009-09-16 20:07:48 +08:00
|
|
|
%doc examples/python
|
|
|
|
%doc examples/domain-events/events-python
|
2008-09-17 22:09:13 +08:00
|
|
|
%endif
|
2005-12-20 00:34:11 +08:00
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
%changelog
|
2010-10-29 22:50:33 +08:00
|
|
|
* Fri Oct 29 2010 Daniel Veillard <veillard@redhat.com> - 0.8.5-1
|
|
|
|
- Enable JSON and netdev features in QEMU >= 0.13
|
|
|
|
- framework for auditing integration
|
|
|
|
- framework DTrace/SystemTap integration
|
|
|
|
- Setting the number of vcpu at boot
|
|
|
|
- Enable support for nested SVM
|
|
|
|
- Virtio plan9fs filesystem QEMU
|
|
|
|
- Memory parameter controls
|
|
|
|
- various improvements and bug fixes
|
|
|
|
|
2010-09-10 23:19:28 +08:00
|
|
|
* Fri Sep 10 2010 Daniel Veillard <veillard@redhat.com> - 0.8.4-1
|
|
|
|
- big improvements to UML driver
|
|
|
|
- various improvements and bug fixes
|
|
|
|
|
2010-08-04 21:03:25 +08:00
|
|
|
* Wed Aug 4 2010 Daniel Veillard <veillard@redhat.com> - 0.8.3-1
|
2010-09-10 23:19:28 +08:00
|
|
|
- esx: Support vSphere 4.1
|
|
|
|
- Qemu arbitrary monitor commands
|
|
|
|
- Qemu Monitor API entry point
|
|
|
|
- various improvements and bug fixes
|
|
|
|
|
2010-07-05 23:29:25 +08:00
|
|
|
* Mon Jul 5 2010 Daniel Veillard <veillard@redhat.com> - 0.8.2-1
|
|
|
|
- phyp: adding support for IVM
|
|
|
|
- libvirt: introduce domainCreateWithFlags API
|
|
|
|
- add 802.1Qbh and 802.1Qbg switches handling
|
|
|
|
- Support for VirtualBox version 3.2
|
|
|
|
- Init script for handling guests on shutdown/boot
|
|
|
|
- qemu: live migration with non-shared storage for kvm
|
|
|
|
|
2010-05-01 00:55:08 +08:00
|
|
|
* Fri Apr 30 2010 Daniel Veillard <veillard@redhat.com> - 0.8.1-1
|
|
|
|
- Starts dnsmasq from libvirtd with --dhcp-hostsfile
|
|
|
|
- Add virDomainGetBlockInfo API to query disk sizing
|
|
|
|
- a lot of bug fixes and cleanups
|
|
|
|
|
2010-04-13 01:39:20 +08:00
|
|
|
* Mon Apr 12 2010 Daniel Veillard <veillard@redhat.com> - 0.8.0-1
|
|
|
|
- Snapshotting support (QEmu/VBox/ESX)
|
|
|
|
- Network filtering API
|
|
|
|
- XenAPI driver
|
|
|
|
- new APIs for domain events
|
|
|
|
- Libvirt managed save API
|
|
|
|
- timer subselection for domain clock
|
|
|
|
- synchronous hooks
|
|
|
|
- API to update guest CPU to host CPU
|
|
|
|
- virDomainUpdateDeviceFlags new API
|
|
|
|
- migrate max downtime API
|
|
|
|
- volume wiping API
|
|
|
|
- and many bug fixes
|
|
|
|
|
2010-03-06 00:10:21 +08:00
|
|
|
* Fri Mar 5 2010 Daniel Veillard <veillard@redhat.com> - 0.7.7-1
|
|
|
|
- macvtap support
|
|
|
|
- async job handling
|
|
|
|
- virtio channel
|
|
|
|
- computing baseline CPU
|
|
|
|
- virDomain{Attach,Detach}DeviceFlags
|
|
|
|
- assorted bug fixes and lots of cleanups
|
|
|
|
|
2010-02-04 01:16:25 +08:00
|
|
|
* Wed Feb 3 2010 Daniel Veillard <veillard@redhat.com> - 0.7.6-1
|
|
|
|
|
2009-12-24 00:00:22 +08:00
|
|
|
* Wed Dec 23 2009 Daniel Veillard <veillard@redhat.com> - 0.7.5-1
|
|
|
|
- Add new API virDomainMemoryStats
|
|
|
|
- Public API and domain extension for CPU flags
|
|
|
|
- vbox: Add support for version 3.1
|
|
|
|
- Support QEMU's virtual FAT block device driver
|
|
|
|
- a lot of fixes
|
|
|
|
|
2009-11-21 00:31:13 +08:00
|
|
|
* Fri Nov 20 2009 Daniel Veillard <veillard@redhat.com> - 0.7.3-1
|
|
|
|
- udev node device backend
|
|
|
|
- API to check object properties
|
|
|
|
- better QEmu monitor processing
|
|
|
|
- MAC address based port filtering for qemu
|
|
|
|
- support IPv6 and multiple addresses per interfaces
|
|
|
|
- a lot of fixes
|
|
|
|
|
2009-09-15 20:24:51 +08:00
|
|
|
* Tue Sep 15 2009 Daniel Veillard <veillard@redhat.com> - 0.7.1-1
|
|
|
|
- ESX, VBox driver updates
|
|
|
|
- mutipath support
|
|
|
|
- support for encrypted (qcow) volume
|
|
|
|
- compressed save image format for Qemu/KVM
|
|
|
|
- QEmu host PCI device hotplug support
|
|
|
|
- configuration of huge pages in guests
|
|
|
|
- a lot of fixes
|
|
|
|
|
2009-08-05 22:00:41 +08:00
|
|
|
* Wed Aug 5 2009 Daniel Veillard <veillard@redhat.com> - 0.7.0-1
|
|
|
|
- ESX, VBox3, Power Hypervisor drivers
|
|
|
|
- new net filesystem glusterfs
|
|
|
|
- Storage cloning for LVM and Disk backends
|
|
|
|
- interface implementation based on netcf
|
|
|
|
- Support cgroups in QEMU driver
|
|
|
|
- QEmu hotplug NIC support
|
|
|
|
- a lot of fixes
|
|
|
|
|
2009-07-03 22:32:17 +08:00
|
|
|
* Fri Jul 3 2009 Daniel Veillard <veillard@redhat.com> - 0.6.5-1
|
|
|
|
- release of 0.6.5
|
|
|
|
|
2009-05-30 00:51:15 +08:00
|
|
|
* Fri May 29 2009 Daniel Veillard <veillard@redhat.com> - 0.6.4-1
|
|
|
|
- release of 0.6.4
|
|
|
|
- various new APIs
|
|
|
|
|
2009-04-24 22:04:54 +08:00
|
|
|
* Fri Apr 24 2009 Daniel Veillard <veillard@redhat.com> - 0.6.3-1
|
|
|
|
- release of 0.6.3
|
|
|
|
- VirtualBox driver
|
|
|
|
|
2009-04-03 23:25:38 +08:00
|
|
|
* Fri Apr 3 2009 Daniel Veillard <veillard@redhat.com> - 0.6.2-1
|
|
|
|
- release of 0.6.2
|
|
|
|
|
|
|
|
* Fri Mar 4 2009 Daniel Veillard <veillard@redhat.com> - 0.6.1-1
|
|
|
|
- release of 0.6.1
|
|
|
|
|
|
|
|
* Sat Jan 31 2009 Daniel Veillard <veillard@redhat.com> - 0.6.0-1
|
|
|
|
- release of 0.6.0
|
|
|
|
|
2008-11-25 23:48:11 +08:00
|
|
|
* Tue Nov 25 2008 Daniel Veillard <veillard@redhat.com> - 0.5.0-1
|
|
|
|
- release of 0.5.0
|
|
|
|
|
2008-09-24 04:48:49 +08:00
|
|
|
* Tue Sep 23 2008 Daniel Veillard <veillard@redhat.com> - 0.4.6-1
|
|
|
|
- release of 0.4.6
|
|
|
|
|
2008-09-08 22:32:18 +08:00
|
|
|
* Mon Sep 8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.5-1
|
|
|
|
- release of 0.4.5
|
|
|
|
|
|
|
|
* Wed Jun 25 2008 Daniel Veillard <veillard@redhat.com> - 0.4.4-1
|
|
|
|
- release of 0.4.4
|
|
|
|
- mostly a few bug fixes from 0.4.3
|
|
|
|
|
2008-06-13 00:10:50 +08:00
|
|
|
* Thu Jun 12 2008 Daniel Veillard <veillard@redhat.com> - 0.4.3-1
|
|
|
|
- release of 0.4.3
|
|
|
|
- lots of bug fixes and small improvements
|
|
|
|
|
2008-04-09 00:45:57 +08:00
|
|
|
* Tue Apr 8 2008 Daniel Veillard <veillard@redhat.com> - 0.4.2-1
|
|
|
|
- release of 0.4.2
|
|
|
|
- lots of bug fixes and small improvements
|
|
|
|
|
2008-03-03 22:42:37 +08:00
|
|
|
* Mon Mar 3 2008 Daniel Veillard <veillard@redhat.com> - 0.4.1-1
|
|
|
|
- Release of 0.4.1
|
|
|
|
- Storage APIs
|
|
|
|
- xenner support
|
|
|
|
- lots of assorted improvements, bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
2007-12-18 07:51:07 +08:00
|
|
|
* Tue Dec 18 2007 Daniel Veillard <veillard@redhat.com> - 0.4.0-1
|
|
|
|
- Release of 0.4.0
|
|
|
|
- SASL based authentication
|
|
|
|
- PolicyKit authentication
|
|
|
|
- improved NUMA and statistics support
|
|
|
|
- lots of assorted improvements, bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
2007-10-01 05:09:29 +08:00
|
|
|
* Sun Sep 30 2007 Daniel Veillard <veillard@redhat.com> - 0.3.3-1
|
|
|
|
- Release of 0.3.3
|
|
|
|
- Avahi support
|
|
|
|
- NUMA support
|
|
|
|
- lots of assorted improvements, bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
2007-08-21 23:04:46 +08:00
|
|
|
* Tue Aug 21 2007 Daniel Veillard <veillard@redhat.com> - 0.3.2-1
|
|
|
|
- Release of 0.3.2
|
|
|
|
- API for domains migration
|
|
|
|
- APIs for collecting statistics on disks and interfaces
|
|
|
|
- lots of assorted bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
2007-07-24 23:32:55 +08:00
|
|
|
* Tue Jul 24 2007 Daniel Veillard <veillard@redhat.com> - 0.3.1-1
|
|
|
|
- Release of 0.3.1
|
|
|
|
- localtime clock support
|
|
|
|
- PS/2 and USB input devices
|
|
|
|
- lots of assorted bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
2007-07-09 20:41:29 +08:00
|
|
|
* Mon Jul 9 2007 Daniel Veillard <veillard@redhat.com> - 0.3.0-1
|
|
|
|
- Release of 0.3.0
|
|
|
|
- Secure remote access support
|
|
|
|
- unification of daemons
|
|
|
|
- lots of assorted bugfixes and cleanups
|
|
|
|
- documentation and localization improvements
|
|
|
|
|
|
|
|
* Fri Jun 8 2007 Daniel Veillard <veillard@redhat.com> - 0.2.3-1
|
2007-06-08 19:11:56 +08:00
|
|
|
- Release of 0.2.3
|
|
|
|
- lot of assorted bugfixes and cleanups
|
|
|
|
- support for Xen-3.1
|
|
|
|
- new scheduler API
|
|
|
|
|
2007-04-17 17:33:51 +08:00
|
|
|
* Tue Apr 17 2007 Daniel Veillard <veillard@redhat.com> - 0.2.2-1
|
|
|
|
- Release of 0.2.2
|
|
|
|
- lot of assorted bugfixes and cleanups
|
|
|
|
- preparing for Xen-3.0.5
|
|
|
|
|
2007-03-28 16:48:52 +08:00
|
|
|
* Thu Mar 22 2007 Jeremy Katz <katzj@redhat.com> - 0.2.1-2.fc7
|
|
|
|
- don't require xen; we don't need the daemon and can control non-xen now
|
|
|
|
- fix scriptlet error (need to own more directories)
|
|
|
|
- update description text
|
|
|
|
|
2007-04-17 17:33:51 +08:00
|
|
|
* Fri Mar 16 2007 Daniel Veillard <veillard@redhat.com> - 0.2.1-1
|
2007-03-17 03:31:14 +08:00
|
|
|
- Release of 0.2.1
|
|
|
|
- lot of bug and portability fixes
|
|
|
|
- Add support for network autostart and init scripts
|
|
|
|
- New API to detect the virtualization capabilities of a host
|
|
|
|
- Documentation updates
|
|
|
|
|
2007-03-05 18:56:02 +08:00
|
|
|
* Fri Feb 23 2007 Daniel P. Berrange <berrange@redhat.com> - 0.2.0-4.fc7
|
|
|
|
- Fix loading of guest & network configs
|
|
|
|
|
|
|
|
* Fri Feb 16 2007 Daniel P. Berrange <berrange@redhat.com> - 0.2.0-3.fc7
|
|
|
|
- Disable kqemu support since its not in Fedora qemu binary
|
|
|
|
- Fix for -vnc arg syntax change in 0.9.0 QEMU
|
|
|
|
|
|
|
|
* Thu Feb 15 2007 Daniel P. Berrange <berrange@redhat.com> - 0.2.0-2.fc7
|
|
|
|
- Fixed path to qemu daemon for autostart
|
|
|
|
- Fixed generation of <features> block in XML
|
|
|
|
- Pre-create config directory at startup
|
|
|
|
|
|
|
|
* Wed Feb 14 2007 Daniel Veillard <veillard@redhat.com> 0.2.0-1.fc7
|
2007-02-15 02:54:26 +08:00
|
|
|
- support for KVM and QEmu
|
|
|
|
- support for network configuration
|
|
|
|
- assorted fixes
|
|
|
|
|
2007-03-05 18:56:02 +08:00
|
|
|
* Mon Jan 22 2007 Daniel Veillard <veillard@redhat.com> 0.1.11-1.fc7
|
2007-01-22 23:31:00 +08:00
|
|
|
- finish inactive Xen domains support
|
|
|
|
- memory leak fix
|
|
|
|
- RelaxNG schemas for XML configs
|
|
|
|
|
2007-03-05 18:56:02 +08:00
|
|
|
* Wed Dec 20 2006 Daniel Veillard <veillard@redhat.com> 0.1.10-1.fc7
|
2006-12-20 22:54:25 +08:00
|
|
|
- support for inactive Xen domains
|
|
|
|
- improved support for Xen display and vnc
|
|
|
|
- a few bug fixes
|
|
|
|
- localization updates
|
|
|
|
|
2007-03-05 18:56:02 +08:00
|
|
|
* Thu Dec 7 2006 Jeremy Katz <katzj@redhat.com> - 0.1.9-2
|
|
|
|
- rebuild against python 2.5
|
|
|
|
|
2006-11-29 21:03:24 +08:00
|
|
|
* Wed Nov 29 2006 Daniel Veillard <veillard@redhat.com> 0.1.9-1
|
|
|
|
- better error reporting
|
|
|
|
- python bindings fixes and extensions
|
|
|
|
- add support for shareable drives
|
|
|
|
- add support for non-bridge style networking
|
|
|
|
- hot plug device support
|
|
|
|
- added support for inactive domains
|
|
|
|
- API to dump core of domains
|
|
|
|
- various bug fixes, cleanups and improvements
|
|
|
|
- updated the localization
|
|
|
|
|
2007-03-05 18:56:02 +08:00
|
|
|
* Tue Nov 7 2006 Daniel Veillard <veillard@redhat.com> 0.1.8-3
|
|
|
|
- it's pkgconfig not pgkconfig !
|
|
|
|
|
|
|
|
* Mon Nov 6 2006 Daniel Veillard <veillard@redhat.com> 0.1.8-2
|
|
|
|
- fixing spec file, added %dist, -devel requires pkgconfig and xen-devel
|
|
|
|
- Resolves: rhbz#202320
|
|
|
|
|
2006-10-17 00:04:55 +08:00
|
|
|
* Mon Oct 16 2006 Daniel Veillard <veillard@redhat.com> 0.1.8-1
|
|
|
|
- fix missing page size detection code for ia64
|
|
|
|
- fix mlock size when getting domain info list from hypervisor
|
|
|
|
- vcpu number initialization
|
|
|
|
- don't label crashed domains as shut off
|
|
|
|
- fix virsh man page
|
|
|
|
- blktapdd support for alternate drivers like blktap
|
|
|
|
- memory leak fixes (xend interface and XML parsing)
|
|
|
|
- compile fix
|
|
|
|
- mlock/munlock size fixes
|
|
|
|
|
|
|
|
* Fri Sep 22 2006 Daniel Veillard <veillard@redhat.com> 0.1.7-1
|
2006-09-29 18:25:21 +08:00
|
|
|
- Fix bug when running against xen-3.0.3 hypercalls
|
|
|
|
- Fix memory bug when getting vcpus info from xend
|
|
|
|
|
2006-09-22 17:58:17 +08:00
|
|
|
* Fri Sep 22 2006 Daniel Veillard <veillard@redhat.com> 0.1.6-1
|
|
|
|
- Support for localization
|
|
|
|
- Support for new Xen-3.0.3 cdrom and disk configuration
|
|
|
|
- Support for setting VNC port
|
|
|
|
- Fix bug when running against xen-3.0.2 hypercalls
|
|
|
|
- Fix reconnection problem when talking directly to http xend
|
|
|
|
|
|
|
|
* Tue Sep 5 2006 Jeremy Katz <katzj@redhat.com> - 0.1.5-3
|
|
|
|
- patch from danpb to support new-format cd devices for HVM guests
|
|
|
|
|
|
|
|
* Tue Sep 5 2006 Daniel Veillard <veillard@redhat.com> 0.1.5-2
|
|
|
|
- reactivating ia64 support
|
|
|
|
|
2006-09-05 14:48:44 +08:00
|
|
|
* Tue Sep 5 2006 Daniel Veillard <veillard@redhat.com> 0.1.5-1
|
|
|
|
- new release
|
|
|
|
- bug fixes
|
|
|
|
- support for new hypervisor calls
|
|
|
|
- early code for config files and defined domains
|
|
|
|
|
|
|
|
* Mon Sep 4 2006 Daniel Berrange <berrange@redhat.com> - 0.1.4-5
|
|
|
|
- add patch to address dom0_ops API breakage in Xen 3.0.3 tree
|
|
|
|
|
|
|
|
* Mon Aug 28 2006 Jeremy Katz <katzj@redhat.com> - 0.1.4-4
|
2008-02-06 03:27:37 +08:00
|
|
|
- add patch to support paravirt framebuffer in Xen
|
2006-09-05 14:48:44 +08:00
|
|
|
|
|
|
|
* Mon Aug 21 2006 Daniel Veillard <veillard@redhat.com> 0.1.4-3
|
|
|
|
- another patch to fix network handling in non-HVM guests
|
|
|
|
|
|
|
|
* Thu Aug 17 2006 Daniel Veillard <veillard@redhat.com> 0.1.4-2
|
|
|
|
- patch to fix virParseUUID()
|
|
|
|
|
2006-08-30 06:27:07 +08:00
|
|
|
* Wed Aug 16 2006 Daniel Veillard <veillard@redhat.com> 0.1.4-1
|
|
|
|
- vCPUs and affinity support
|
|
|
|
- more complete XML, console and boot options
|
|
|
|
- specific features support
|
|
|
|
- enforced read-only connections
|
|
|
|
- various improvements, bug fixes
|
|
|
|
|
|
|
|
* Wed Aug 2 2006 Jeremy Katz <katzj@redhat.com> - 0.1.3-6
|
|
|
|
- add patch from pvetere to allow getting uuid from libvirt
|
|
|
|
|
|
|
|
* Wed Aug 2 2006 Jeremy Katz <katzj@redhat.com> - 0.1.3-5
|
|
|
|
- build on ia64 now
|
|
|
|
|
|
|
|
* Thu Jul 27 2006 Jeremy Katz <katzj@redhat.com> - 0.1.3-4
|
|
|
|
- don't BR xen, we just need xen-devel
|
|
|
|
|
|
|
|
* Thu Jul 27 2006 Daniel Veillard <veillard@redhat.com> 0.1.3-3
|
|
|
|
- need rebuild since libxenstore is now versionned
|
|
|
|
|
2006-07-24 22:32:03 +08:00
|
|
|
* Mon Jul 24 2006 Mark McLoughlin <markmc@redhat.com> - 0.1.3-2
|
|
|
|
- Add BuildRequires: xen-devel
|
|
|
|
|
|
|
|
* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 0.1.3-1.1
|
|
|
|
- rebuild
|
|
|
|
|
2006-07-12 00:57:03 +08:00
|
|
|
* Tue Jul 11 2006 Daniel Veillard <veillard@redhat.com> 0.1.3-1
|
|
|
|
- support for HVM Xen guests
|
|
|
|
- various bugfixes
|
|
|
|
|
2006-07-03 23:48:49 +08:00
|
|
|
* Mon Jul 3 2006 Daniel Veillard <veillard@redhat.com> 0.1.2-1
|
|
|
|
- added a proxy mechanism for read only access using httpu
|
|
|
|
- fixed header includes paths
|
|
|
|
|
2006-06-21 21:36:07 +08:00
|
|
|
* Wed Jun 21 2006 Daniel Veillard <veillard@redhat.com> 0.1.1-1
|
|
|
|
- extend and cleanup the driver infrastructure and code
|
|
|
|
- python examples
|
|
|
|
- extend uuid support
|
|
|
|
- bug fixes, buffer handling cleanups
|
|
|
|
- support for new Xen hypervisor API
|
|
|
|
- test driver for unit testing
|
|
|
|
- virsh --conect argument
|
|
|
|
|
2006-04-10 22:15:33 +08:00
|
|
|
* Mon Apr 10 2006 Daniel Veillard <veillard@redhat.com> 0.1.0-1
|
|
|
|
- various fixes
|
|
|
|
- new APIs: for Node information and Reboot
|
|
|
|
- virsh improvements and extensions
|
|
|
|
- documentation updates and man page
|
|
|
|
- enhancement and fixes of the XML description format
|
|
|
|
|
2006-02-28 22:22:33 +08:00
|
|
|
* Tue Feb 28 2006 Daniel Veillard <veillard@redhat.com> 0.0.6-1
|
|
|
|
- added error handling APIs
|
|
|
|
- small bug fixes
|
|
|
|
- improve python bindings
|
|
|
|
- augment documentation and regression tests
|
|
|
|
|
2006-02-23 19:35:37 +08:00
|
|
|
* Thu Feb 23 2006 Daniel Veillard <veillard@redhat.com> 0.0.5-1
|
|
|
|
- new domain creation API
|
|
|
|
- new UUID based APIs
|
|
|
|
- more tests, documentation, devhelp
|
|
|
|
- bug fixes
|
|
|
|
|
2006-02-10 18:28:59 +08:00
|
|
|
* Fri Feb 10 2006 Daniel Veillard <veillard@redhat.com> 0.0.4-1
|
|
|
|
- fixes some problems in 0.0.3 due to the change of names
|
|
|
|
|
2006-02-10 01:45:11 +08:00
|
|
|
* Wed Feb 8 2006 Daniel Veillard <veillard@redhat.com> 0.0.3-1
|
2008-02-06 03:27:37 +08:00
|
|
|
- changed library name to libvirt from libvir, complete and test the python
|
2006-02-10 01:45:11 +08:00
|
|
|
bindings
|
|
|
|
|
2006-01-31 18:21:10 +08:00
|
|
|
* Sun Jan 29 2006 Daniel Veillard <veillard@redhat.com> 0.0.2-1
|
|
|
|
- upstream release of 0.0.2, use xend, save and restore added, python bindings
|
|
|
|
fixed
|
|
|
|
|
2005-11-02 23:37:34 +08:00
|
|
|
* Wed Nov 2 2005 Daniel Veillard <veillard@redhat.com> 0.0.1-1
|
|
|
|
- created
|