rpm/libvirt
SHA256
1
0
Fork 0
forked from pool/libvirt
Code Pull Requests Activity
f9b2460e54
libvirt/suse-qemu-conf.patch

77 lines
3.1 KiB
Diff
Raw Normal View History

- Advertise aarch64 UEFI firmware paths - adjust spec file to include aarch64 paths in '--with-loader-nvram=' configure option - adjust qemu.conf 'nvram' option to include the SUSE paths bsc#981836, bsc#983747 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=541
2016-06-15 21:29:46 +02:00
SUSE adjustments to qemu.conf
This patch contains SUSE-specific adjustments to the upstream
qemu.conf configuration file. In the future, it might make
sense to separate these changes into individual patches (e.g.
suse-qemu-conf-secdriver.patch, suse-qemu-conf-lockmgr.patch,
etc.), but for now they are all lumped together in this
single patch.
Accepting request 438412 from home:jfehlig:branches:Virtualization - Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html OBS-URL: https://build.opensuse.org/request/show/438412 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=569
2016-11-02 22:55:27 +01:00
Index: libvirt-2.4.0/src/qemu/qemu.conf
libvirt updates for openSUSE12.1 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=166
2011-10-18 23:25:37 +02:00
===================================================================
Accepting request 438412 from home:jfehlig:branches:Virtualization - Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html OBS-URL: https://build.opensuse.org/request/show/438412 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=569
2016-11-02 22:55:27 +01:00
--- libvirt-2.4.0.orig/src/qemu/qemu.conf
+++ libvirt-2.4.0/src/qemu/qemu.conf
@@ -283,11 +283,20 @@
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
# isolation, but it cannot appear in a list of drivers.
#
#security_driver = "selinux"
+#security_driver = "apparmor"
libvirt updates for openSUSE12.1 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=166
2011-10-18 23:25:37 +02:00
- Update to libvirt 0.9.10 - Add support for sVirt in the LXC driver - Add new API virDomainBlockRebase - Add api to set and get domain metadata - virDomainGetDiskErrors public API - Add rawio attribute to disk element of domain XML - Introduce virDomainPMSuspendForDuration API - Add virStorageVolResize() API - Add a virt-host-validate command to sanity check HV config - Add new virDomainShutdownFlags API - QEMU guest agent support OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=197
2012-02-15 20:01:07 +01:00
# If set to non-zero, then the default security labeling
# will make guests confined. If set to zero, then guests
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
-# will be unconfined by default. Defaults to 1.
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
-#security_default_confined = 1
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
+# will be unconfined by default. Defaults to 0.
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
+#
+# SUSE Note:
+# Currently, Apparmor is the default security framework in SUSE
+# distros. If Apparmor is enabled on the host, libvirtd is
+# generously confined but users must opt-in to confine qemu
+# instances. Change this to a non-zero value to enable default
+# Apparmor confinement of qemu instances.
+#
+security_default_confined = 0
Accepting request 262985 from home:cbosdonnat:branches:Virtualization - Fix potential crasher in virt-aa-helper 2222123-virt-aa-helper-crash.patch - ip link add now needs the 'name' parameter. 433b427-iplink-name.patch - Fixes for virt-sandbox-service to work: - Allow adding virt-sandbox service config to apparmor rules. c264eea-virt-aa-helper-sandbox.patch - fix symlink resolving for containers to start. 72fecf1-lxc-resolve-symlinks.patch - fix unmounting file system if it contains the source to mount. e50457d-lxc-unmount-check.patch - Remove security_driver = "none" in qemu config. This completely disabled all security drivers instead of probing them. - Changed default value of QEMU's security_default_confined to 0 to keep QEMU domains unconfined by default. OBS-URL: https://build.opensuse.org/request/show/262985 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=422
2014-11-25 14:41:55 +01:00
# If set to non-zero, then attempts to create unconfined
- Change default setting of security_default_confined in /etc/libvirt/qemu.conf instead of in code. Making the change in code changes the default behavior for all users, even those that have a custom security setup in their /etc/libvirt/qemu.conf. Modified suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=442
2015-03-11 16:35:20 +01:00
# guests will be blocked. Defaults to 0.
Accepting request 438412 from home:jfehlig:branches:Virtualization - Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html OBS-URL: https://build.opensuse.org/request/show/438412 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=569
2016-11-02 22:55:27 +01:00
@@ -531,11 +540,22 @@
- Update to libvirt 0.9.11.4 stable release OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=212
2012-06-20 02:00:14 +02:00
#allow_disk_format_probing = 1
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
-# In order to prevent accidentally starting two domains that
-# share one writable disk, libvirt offers two approaches for
-# locking files. The first one is sanlock, the other one,
-# virtlockd, is then our own implementation. Accepted values
-# are "sanlock" and "lockd".
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
+# SUSE note:
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
+# Two lock managers are supported: lockd and sanlock. lockd, which
+# is provided by the virtlockd service, uses advisory locks (flock(2))
+# to protect virtual machine disks. sanlock uses the notion of leases
+# to protect virtual machine disks and is more appropriate in a SAN
+# environment.
- Add a note in /etc/libvirt/qemu.conf describing administrator vigilance required when enabling a lock manager such as sanlock OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=200
2012-02-16 18:05:01 +01:00
+#
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
+# For most deployments that require virtual machine disk protection,
+# lockd is recommended since it is easy to configure and the virtlockd
+# service can be restarted without terminating any running virtual
+# machines. sanlock, which may be preferred in some SAN environments,
+# has the disadvantage of not being able to be restarted without
+# first terminating all virtual machines for which it holds leases.
+#
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
+# Specify lockd or sanlock to enable protection of virtual machine disk
+# content.
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
#
Accepting request 228741 from home:cbosdonnat:branches:Virtualization Updated to 1.2.3 OBS-URL: https://build.opensuse.org/request/show/228741 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=362
2014-04-02 14:48:46 +02:00
#lock_manager = "lockd"
- Improve lock manager comments in qemu.conf Updated suse-qemu-conf.patch OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=357
2014-03-04 20:05:01 +01:00
Accepting request 438412 from home:jfehlig:branches:Virtualization - Update to libvirt 2.4.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html OBS-URL: https://build.opensuse.org/request/show/438412 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=569
2016-11-02 22:55:27 +01:00
@@ -626,9 +646,8 @@
- Advertise aarch64 UEFI firmware paths - adjust spec file to include aarch64 paths in '--with-loader-nvram=' configure option - adjust qemu.conf 'nvram' option to include the SUSE paths bsc#981836, bsc#983747 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=541
2016-06-15 21:29:46 +02:00
# for x86_64 and i686, but it's AAVMF for aarch64. The libvirt default
# follows this scheme.
#nvram = [
-# "/usr/share/OVMF/OVMF_CODE.fd:/usr/share/OVMF/OVMF_VARS.fd",
Accepting request 424555 from home:jfehlig:branches:Virtualization - Update to libvirt 2.2.0 - Many incremental improvements and bug fixes, see http://libvirt.org/news.html - Dropped patches: 856965b3-qemu-secdriver.patch, 541e9ae6-cpu-vendor-crash-fix.patch, d53d4650-qemu-rbd-auth.patch OBS-URL: https://build.opensuse.org/request/show/424555 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=565
2016-09-03 03:58:32 +02:00
-# "/usr/share/OVMF/OVMF_CODE.secboot.fd:/usr/share/OVMF/OVMF_VARS.fd",
- Advertise aarch64 UEFI firmware paths - adjust spec file to include aarch64 paths in '--with-loader-nvram=' configure option - adjust qemu.conf 'nvram' option to include the SUSE paths bsc#981836, bsc#983747 OBS-URL: https://build.opensuse.org/package/show/Virtualization/libvirt?expand=0&rev=541
2016-06-15 21:29:46 +02:00
-# "/usr/share/AAVMF/AAVMF_CODE.fd:/usr/share/AAVMF/AAVMF_VARS.fd"
+# "/usr/share/qemu/ovmf-x86_64-ms-code.bin:/usr/share/qemu/ovmf-x86_64-ms-vars.bin",
+# "/usr/share/qemu/aavmf-aarch64-code.bin:/usr/share/qemu/aavmf-aarch64-vars.bin"
#]
# The backend to use for handling stdout/stderr output from
Copy Permalink