pool/libvirt
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8b02f73712
libvirt/suse-qemu-conf.patch

56 lines
2.2 KiB
Diff
Raw Normal View History

Accepting request 294211 from home:jfehlig:branches:Virtualization - Disable building wireshark dissector. Commit 37397320 requires wireshark pkgconfig, which SUSE wireshark packages do not provide. - Disable building the legacy Xen driver since Xen no longer provides the xend toolstack. Remove xend-specific patches while at it: fix-pci-attach-xen-driver.patch, xen-name-for-devid.patch - Update to libvirt 1.2.14 - qemu: Implement memory device hotplug - Implement public API for virDomainPinIOThread - Implement public API for virDomainGetIOThreadsInfo - SRIOV NIC offload feature discovery - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop disable-hugepage-test.patch in favor of upstream fix - Fix build on older distros containing a polkit package that lacks support for /etc/polkit-1/rules.d drop directory OBS-URL: https://build.opensuse.org/request/show/294211 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=450
2015-04-02 18:20:09 +02:00
Index: libvirt-1.2.14/src/qemu/qemu.conf
libvirt updates for openSUSE12.1 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=166
2011-10-18 23:25:37 +02:00
===================================================================
Accepting request 294211 from home:jfehlig:branches:Virtualization - Disable building wireshark dissector. Commit 37397320 requires wireshark pkgconfig, which SUSE wireshark packages do not provide. - Disable building the legacy Xen driver since Xen no longer provides the xend toolstack. Remove xend-specific patches while at it: fix-pci-attach-xen-driver.patch, xen-name-for-devid.patch - Update to libvirt 1.2.14 - qemu: Implement memory device hotplug - Implement public API for virDomainPinIOThread - Implement public API for virDomainGetIOThreadsInfo - SRIOV NIC offload feature discovery - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Drop disable-hugepage-test.patch in favor of upstream fix - Fix build on older distros containing a polkit package that lacks support for /etc/polkit-1/rules.d drop directory OBS-URL: https://build.opensuse.org/request/show/294211 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=450
2015-04-02 18:20:09 +02:00
--- libvirt-1.2.14.orig/src/qemu/qemu.conf
+++ libvirt-1.2.14/src/qemu/qemu.conf
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
@@ -201,11 +201,20 @@
# isolation, but it cannot appear in a list of drivers.
#
#security_driver = "selinux"
+#security_driver = "apparmor"
libvirt updates for openSUSE12.1 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=166
2011-10-18 23:25:37 +02:00
- Update to libvirt 0.9.10 - Add support for sVirt in the LXC driver - Add new API virDomainBlockRebase - Add api to set and get domain metadata - virDomainGetDiskErrors public API - Add rawio attribute to disk element of domain XML - Introduce virDomainPMSuspendForDuration API - Add virStorageVolResize() API - Add a virt-host-validate command to sanity check HV config - Add new virDomainShutdownFlags API - QEMU guest agent support OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=197
2012-02-15 20:01:07 +01:00
# If set to non-zero, then the default security labeling
# will make guests confined. If set to zero, then guests
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
-# will be unconfined by default. Defaults to 1.
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
-#security_default_confined = 1
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
+# will be unconfined by default. Defaults to 0.
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
+#
+# SUSE Note:
+# Currently, Apparmor is the default security framework in SUSE
+# distros. If Apparmor is enabled on the host, libvirtd is
+# generously confined but users must opt-in to confine qemu
+# instances. Change this to a non-zero value to enable default
+# Apparmor confinement of qemu instances.
+#
+security_default_confined = 0
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
# If set to non-zero, then attempts to create unconfined
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
# guests will be blocked. Defaults to 0.
@@ -417,11 +426,22 @@
- Update to libvirt 0.9.11.4 stable release OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=212
2012-06-20 02:00:14 +02:00
#allow_disk_format_probing = 1
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
-# In order to prevent accidentally starting two domains that
-# share one writable disk, libvirt offers two approaches for
-# locking files. The first one is sanlock, the other one,
-# virtlockd, is then our own implementation. Accepted values
-# are "sanlock" and "lockd".
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
+# SUSE note:
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
+# Two lock managers are supported: lockd and sanlock. lockd, which
+# is provided by the virtlockd service, uses advisory locks (flock(2))
+# to protect virtual machine disks. sanlock uses the notion of leases
+# to protect virtual machine disks and is more appropriate in a SAN
+# environment.
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
+#
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
+# For most deployments that require virtual machine disk protection,
+# lockd is recommended since it is easy to configure and the virtlockd
+# service can be restarted without terminating any running virtual
+# machines. sanlock, which may be preferred in some SAN environments,
+# has the disadvantage of not being able to be restarted without
+# first terminating all virtual machines for which it holds leases.
+#
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
+# Specify lockd or sanlock to enable protection of virtual machine disk
+# content.
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
#
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
#lock_manager = "lockd"
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
Reference in New Issue Copy Permalink