10 Commits

Author SHA256 Message Date
6335fb31bb - Update to Xen 4.21.0 FCS release
* The minimum toolchain requirements have increased for some architectures:
    - For x86, GCC 5.1 and Binutils 2.25, or Clang/LLVM 11
    - For ARM32 and ARM64, GCC 5.1 and Binutils 2.25
    - For RISC-V, GCC 12.2 and Binutils 2.39
  * Debian Trixie added to CI.  Debian Bullseye retired from CI for RISC-V due
    to the baseline change.
  * Linux based device model stubdomains are now fully supported.
  * New dependency on library json-c 0.15 or later, the toolstack will prefer it
    to `YAJL` when available.
  * Introduce libxenmanage as a stable library, replacing xenstored's
    dependency on unstable libraries.
  * Introduce new PDX compression algorithm to cope with Intel Sierra Forest and
    Granite Rapids having sparse memory maps.
  * Support of qemu-traditional has been removed.
  * The in-tree oxenstored is deprecated and will be removed in a future
    version of Xen.  It is moving into the Xapi project
    https://github.com/xapi-project/oxenstored so it can be maintained in line
    with the other Ocaml projects in the Xen ecosystem.
  * On x86:
    - Restrict the cache flushing done as a result of guest physical memory map
      manipulations and memory type changes.
    - Allow controlling the MTRR cache attribute of the Xen platform PCI device
      BAR for HVM guests, to improve performance of guests using it to map the
      grant table or foreign memory.
    - Allow configuring the number of altp2m tables per domain via vm.cfg.
    - Option to attempt to fixup p2m page-faults on PVH dom0.
    - Resizable BARs is supported for PVH dom0.
    - Support PCI passthrough for HVM domUs when dom0 is PVH (note SR-IOV
      capability usage is not yet supported on PVH dom0).

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=903
2025-11-19 18:50:34 +00:00
504a12ff89 - Update to Xen 4.17.0 RC4 release
xen-4.17.0-testing-src.tar.bz2
- Drop patches contained in new tarball or invalid
  62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
  xsa411.patch

- bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
  take excessively long (XSA-410)
  xsa410-01.patch
  xsa410-02.patch
  xsa410-03.patch
  xsa410-04.patch
  xsa410-05.patch
  xsa410-06.patch
  xsa410-07.patch
  xsa410-08.patch
  xsa410-09.patch
  xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
  transitive grant copy handling (XSA-411)

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=784
2022-12-01 22:39:51 +00:00
0f2f8597c0 - Update to Xen 4.16.2 bug fix release (bsc#1027519)
xen-4.16.2-testing-src.tar.bz2
- Drop patches contained in new tarball
  625fca42-VT-d-reserved-CAP-ND.patch
  626f7ee8-x86-MSR-handle-P5-MC-reads.patch
  627549d6-IO-shutdown-race.patch
  62a1e594-x86-clean-up-_get_page_type.patch
  62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
  62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
  62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
  62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
  62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
  62a1e649-x86-track-and-flush-non-coherent.patch
  62a99614-IOMMU-x86-gcc12.patch
  62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
  62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
  62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
  62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
  62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
  62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
  62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
  62cc31ee-cmdline-extend-parse_boolean.patch
  62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
  62cd91d0-x86-spec-ctrl-rework-context-switching.patch
  62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
  62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
  62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
  62cd91d5-x86-cpuid-BTC_NO-enum.patch
  62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=778
2022-08-22 15:34:48 +00:00
530ef73c25 - Update to Xen 4.16.0 RC2 release
xen-4.16.0-testing-src.tar.bz2
- Modified files
  ipxe-use-rpm-opt-flags.patch
  ipxe.tar.bz2 (new version)

- Update to Xen 4.16.0 RC1 release
  xen-4.16.0-testing-src.tar.bz2
- Drop patches contained in new tarball or invalid
  615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch
  libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch
  libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch
  libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch
  libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch
  xenstore-launch.patch

- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs
  not deassigned correctly (XSA-386)
  615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch

- Revert "Simplify %autosetup".

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=752
2021-11-09 20:15:00 +00:00
dc12183f80 Revert last commit that updates Xen to 4.16
OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=751
2021-11-03 21:29:56 +00:00
dacaa7a5ef - Update to Xen 4.16.0 RC1 release
xen-4.16.0-testing-src.tar.bz2
- Drop patches contained in new tarball or invalid
  615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch
  libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch
  libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch
  libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch
  libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch
  xenstore-launch.patch

- bsc#1191363 - VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs
  not deassigned correctly (XSA-386)
  615c9fd0-VT-d-fix-deassign-of-device-with-RMRR.patch

- Revert "Simplify %autosetup".

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=749
2021-11-01 20:33:07 +00:00
3837e3a093 - Add xen.sysconfig-fillup.patch to make sure xencommons is in a
format as expected by fillup.
  Each comment needs to be followed by an enabled key. Otherwise
  fillup will remove manually enabled key=value pairs, along with
  everything that looks like a stale comment, during next pkg update

- Remove init.xen_loop and /etc/modprobe.d/xen_loop.conf
  The number of loop devices is unlimited since a while

- Refresh xenstore-launch.patch to cover also daemon case

- Now that SOURCE_DATE_EPOCH is defined and Xen Makefile uses it,
  drop reproducible.patch

- Update to Xen 4.15.0 FCS release
  xen-4.15.0-testing-src.tar.bz2
  * Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0.
  * Xen now supports Viridian enlightenments for guests with more than 64 vcpus.
  * Xenstored and oxenstored both now support LiveUpdate (tech preview).
  * Unified boot images
  * Switched x86 MSR accesses to deny by default policy.
  * Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format.
  * Support for zstd-compressed dom0 (x86) and domU kernels.
  * Reduce ACPI verbosity by default.
  * Add ucode=allow-same option to test late microcode loading path.
  * Library improvements from NetBSD ports upstreamed.
  * x86: Allow domains to use AVX-VNNI instructions.
  * Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts.
  * xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend.
  * On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging.

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=743
2021-05-04 14:51:11 +00:00
fae922ce2e - bsc#1177112 - Fix libxc.sr.superpage.patch
The receiving side did detect holes in a to-be-allocated superpage,
  but allocated a superpage anyway. This resulted to over-allocation.

- bsc#1167608 - adjust limit for max_event_channels
  A previous change allowed an unbound number of event channels
  to make sure even large domUs can start of of the box.
  This may have a bad side effect in the light of XSA-344.
  Adjust the built-in limit based on the number of vcpus.
  In case this is not enough, max_event_channels=/maxEventChannels=
  has to be used to set the limit as needed for large domUs
  adjust libxl.max_event_channels.patch

- bsc#1183072 - VUL-0: xen: HVM soft-reset crashes toolstack (XSA-368)
  Also resolves,
    bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl
    bsc#1181989 - openQA job causes libvirtd to dump core when
    running kdump inside domain
  xsa368.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=739
2021-03-18 12:12:28 +00:00
8d6eb3a142 - Update to Xen 4.14.0 FCS release
xen-4.14.0-testing-src.tar.bz2
  * Linux stubdomains (contributed by QUBES OS)
  * Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix)
  * Lightweight VM fork for fuzzing / introspection. (contributed by Intel)
  * Livepatch: buildid and hotpatch stack requirements
  * CONFIG_PV32
  * Hypervisor FS support
  * Running Xen as a Hyper-V Guest
  * Domain ID randomization, persistence across save / restore
  * Golang binding autogeneration
  * KDD support for Windows 7, 8.x and 10
- Dropped patches contained in new tarball
  5eb51be6-cpupool-fix-removing-cpu-from-pool.patch
  5eb51caa-sched-vcpu-pause-flags-atomic.patch
  5ec2a760-x86-determine-MXCSR-mask-always.patch
  5ec50b05-x86-idle-rework-C6-EOI-workaround.patch
  5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch
  5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch
  5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch
  5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch
  5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch
  5ed69804-x86-ucode-fix-start-end-update.patch
  5eda60cb-SVM-split-recalc-NPT-fault-handling.patch
  5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch
  5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch
  5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch
  5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch
  xsa317.patch
  xsa319.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=690
2020-07-27 12:20:05 +00:00
d79479bd9f - Add libxc.migrate_tracking.patch to track live migrations
unconditionally in logfiles, especially in libvirt.
  This will track how long a domU was suspended during transit.

- bsc#1173376 - VUL-0: xen: XSA-317 v1 - Incorrect error handling
  in event channel port allocation
  xsa317.patch
- bsc#1173377 - VUL-0: xen: XSA-319 v1 - inverted code paths in x86
  dirty VRAM tracking
  xsa319.patch
- bsc#1173378 - VUL-0: xen: XSA-321 v1 - insufficient cache write-
  back under VT-d
  xsa321-1.patch
  xsa321-2.patch
  xsa321-3.patch
  xsa321-4.patch
  xsa321-5.patch
  xsa321-6.patch
  xsa321-7.patch
- bsc#1173380 - VUL-0: xen: XSA-328 v1 - non-atomic modification of
  live EPT PTE
  xsa328-1.patch
  xsa328-2.patch

- bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
  Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
  5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch
  5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch)
  5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch)
- Upstream bug fixes (bsc#1027519)

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=687
2020-07-08 15:41:35 +00:00