]> xenbits.xensource.com Git - libvirt.git/log
libvirt.git
8 years agoMake sure sys/types.h is included after sys/sysmacros.h
Michal Privoznik [Tue, 6 Sep 2016 12:20:04 +0000 (14:20 +0200)]
Make sure sys/types.h is included after sys/sysmacros.h

In the latest glibc, major() and minor() functions are marked as
deprecated (glibc commit dbab6577):

  CC       util/libvirt_util_la-vircgroup.lo
util/vircgroup.c: In function 'virCgroupGetBlockDevString':
util/vircgroup.c:768:5: error: '__major_from_sys_types' is deprecated:
  In the GNU C Library, `major' is defined by <sys/sysmacros.h>.
  For historical compatibility, it is currently defined by
  <sys/types.h> as well, but we plan to remove this soon.
  To use `major', include <sys/sysmacros.h> directly.
  If you did not intend to use a system-defined macro `major',
  you should #undef it after including <sys/types.h>.
  [-Werror=deprecated-declarations]
     if (virAsprintf(&ret, "%d:%d ", major(sb.st_rdev), minor(sb.st_rdev)) < 0)
     ^~
In file included from /usr/include/features.h:397:0,
                 from /usr/include/bits/libc-header-start.h:33,
                 from /usr/include/stdio.h:28,
                 from ../gnulib/lib/stdio.h:43,
                 from util/vircgroup.c:26:
/usr/include/sys/sysmacros.h:87:1: note: declared here
 __SYSMACROS_DEFINE_MAJOR (__SYSMACROS_FST_IMPL_TEMPL)
 ^

Moreover, in the glibc commit, there's suggestion to keep
ordering of including of header files as implemented here.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
8 years agotools: Pass opaque data in vshCompleter and introduce autoCompleteOpaque
Nishith Shah [Tue, 6 Sep 2016 12:04:37 +0000 (12:04 +0000)]
tools: Pass opaque data in vshCompleter and introduce autoCompleteOpaque

This patch changes the signature of vshCompleters, allowing to pass along
some data that we might want to along with the completers; for example,
we might want to pass the autocomplete vshControl along with the
completer, in case the completer requires a connection to libvirtd.

Signed-off-by: Nishith Shah <nishithshah.2211@gmail.com>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
8 years agoutil: hostcpu: improve CPU freq code for FreeBSD
Roman Bogorodskiy [Wed, 31 Aug 2016 05:14:41 +0000 (08:14 +0300)]
util: hostcpu: improve CPU freq code for FreeBSD

Current implementation uses the dev.cpu.0.freq sysctl that is
provided by the cpufreq(4) framework and returns the actual
CPU frequency. However, there are environments where it's not available,
e.g. when running nested in KVM. In this case fall back to hw.clockrate
that reports CPU frequency at the boot time.

Resolves (hopefully):
https://bugzilla.redhat.com/show_bug.cgi?id=1369964

8 years agolibvirt-guests.service: Add Requires=libvirtd.service
Andrea Bolognani [Mon, 5 Sep 2016 17:07:42 +0000 (19:07 +0200)]
libvirt-guests.service: Add Requires=libvirtd.service

Having After=libvirtd.service merely ensures that, if both
services are asked to start, libvirtd.service will start
first.

What we really want is for libvirtd.service to be started
whenever libvirt-guests.service is asked to start. Adding a
Requires= relationship guarantees that will happen.

8 years agolibvirt-guests.service: Split After= relationship
Andrea Bolognani [Mon, 5 Sep 2016 17:04:30 +0000 (19:04 +0200)]
libvirt-guests.service: Split After= relationship

We use a separate line for each After= relationship in other
unit files: do the same here for consistency's sake, and also
to make future changes nicer to diff

8 years agolibvirt-guests.service: Improve description
Andrea Bolognani [Mon, 5 Sep 2016 16:59:58 +0000 (18:59 +0200)]
libvirt-guests.service: Improve description

libvirt-guests.service does both suspend *and* resume guests,
depending on whether it's being started or stopped: the
description should reflect this, to avoid confusing messages
during startup.

Replace "active" with "running" (to match virsh list's output)
and don't capitalize libvirt.

8 years agovirtlogd.socket: Tie lifecycle to libvirtd.service
Andrea Bolognani [Tue, 6 Sep 2016 13:16:24 +0000 (15:16 +0200)]
virtlogd.socket: Tie lifecycle to libvirtd.service

We already guarantee that virtlogd.socket is enabled/disabled
along with libvirtd.service, but if libvirtd.service has just
been installed and is started before rebooting, then
virtlogd.socket will not be running and guest startup will
fail.

Add Requires=virtlogd.socket to libvirtd.service to make sure
virtlogd.socket is always started along with libvirtd.service,
and add Before=libvirtd.service to both virtlogd.socket and
virtlogd.service so that virtlogd never disappears before
libvirtd has exited.

Also add PartOf=libvirtd.service to both virtlogd.socket and
virtlogd.service, so that virtlogd can be shut down when not
needed.

Resolves: https://bugzilla.redhat.com/1372576

8 years agotests: add missing data files for core config
Daniel P. Berrange [Tue, 6 Sep 2016 12:37:09 +0000 (13:37 +0100)]
tests: add missing data files for core config

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
8 years agoqemu: Don't warn about missing device in DEVICE_DELETED event
Jiri Denemark [Fri, 2 Sep 2016 12:52:15 +0000 (14:52 +0200)]
qemu: Don't warn about missing device in DEVICE_DELETED event

Debug priority is good enough for this.

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
8 years agoqemu: allow turning off QEMU guest RAM dump globally
Daniel P. Berrange [Wed, 3 Aug 2016 15:20:19 +0000 (16:20 +0100)]
qemu: allow turning off QEMU guest RAM dump globally

We already have the ability to turn off dumping of guest
RAM via the domain XML. This is not particularly useful
though, as it is under control of the management application.
What is needed is a way for the sysadmin to turn off guest
RAM defaults globally, regardless of whether the mgmt app
provides its own way to set this in the domain XML.

So this adds a 'dump_guest_core' option in /etc/libvirt/qemu.conf
which defaults to false. ie guest RAM will never be included in
the QEMU core dumps by default. This default is different from
historical practice, but is considered to be more suitable as
a default because

 a) guest RAM can be huge and so inflicts a DOS on the host
    I/O subsystem when dumping core for QEMU crashes

 b) guest RAM can contain alot of sensitive data belonging
    to the VM owner. This should not generally be copied
    around inside QEMU core dumps submitted to vendors for
    debugging

 c) guest RAM contents are rarely useful in diagnosing
    QEMU crashes

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
8 years agoqemu: add a max_core setting to qemu.conf for core dump size
Daniel P. Berrange [Wed, 18 Mar 2015 11:14:55 +0000 (11:14 +0000)]
qemu: add a max_core setting to qemu.conf for core dump size

Currently the QEMU processes inherit their core dump rlimit
from libvirtd, which is really suboptimal. This change allows
their limit to be directly controlled from qemu.conf instead.

8 years agoutil: storage: Add json pseudo protocol support for legacy RBD strings
Peter Krempa [Mon, 5 Sep 2016 13:15:22 +0000 (15:15 +0200)]
util: storage: Add json pseudo protocol support for legacy RBD strings

RBD in qemu still uses only the legacy 'filename' syntax.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1371758

8 years agoutil: storage: Properly set protocol type when parsing gluster json string
Peter Krempa [Mon, 5 Sep 2016 13:31:44 +0000 (15:31 +0200)]
util: storage: Properly set protocol type when parsing gluster json string

Commit 2ed772cd forgot to set proper protocol. This was also present in
the test data.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1372251

8 years agodocs: Add libvirt-go Go bindings to binding page
Roman Mohr [Tue, 6 Sep 2016 10:47:45 +0000 (12:47 +0200)]
docs: Add libvirt-go Go bindings to binding page

Signed-off-by: Roman Mohr <rmohr@redhat.com>
8 years agovirsh: Complete multiple options when any one option requires data
Nishith Shah [Mon, 5 Sep 2016 09:45:11 +0000 (09:45 +0000)]
virsh: Complete multiple options when any one option requires data

Before this patch:
    virsh # start --domain dom1 [TAB][TAB] <- offers filename completion
    virsh # start --domain [TAB][TAB] <- offers filename completion

After this patch:
    virsh # start --domain dom1 [TAB][TAB] <- offers command completion
    virsh # start --domain [TAB][TAB] <- calls domain completer if
    defined, otherwise falls back to filename completion

Signed-off-by: Nishith Shah <nishithshah.2211@gmail.com>
8 years agovirsh: Allow data or argument options to be completed as well
Nishith Shah [Mon, 5 Sep 2016 09:45:10 +0000 (09:45 +0000)]
virsh: Allow data or argument options to be completed as well

Signed-off-by: Nishith Shah <nishithshah.2211@gmail.com>
8 years agovirsh: Introduce usage of option completers to auto-complete arguments
Nishith Shah [Mon, 5 Sep 2016 09:45:09 +0000 (09:45 +0000)]
virsh: Introduce usage of option completers to auto-complete arguments

Call option completers if argument completion is requested using the
corresponding option completer, if it is defined.

Signed-off-by: Nishith Shah <nishithshah.2211@gmail.com>
8 years agoperf: add more perf events support
Qiaowei Ren [Sat, 16 Jul 2016 08:15:12 +0000 (16:15 +0800)]
perf: add more perf events support

With current perf framework, this patch adds support and documentation
for more perf events, including cache misses, cache references, cpu cycles,
and instructions.

Signed-off-by: Qiaowei Ren <qiaowei.ren@intel.com>
8 years agoperf: Adjust the perf initialization
Qiaowei Ren [Wed, 3 Aug 2016 17:23:31 +0000 (13:23 -0400)]
perf: Adjust the perf initialization

Introduce a static attr table and refactor virPerfEventEnable() for
general purpose usage.

This patch creates a static table/matrix that converts the VIR_PERF_EVENT_*
events into their respective "attr.type" and "attr.config" so that
virPerfEventEnable doesn't have the switch the calling function passes
by value the 'type'.

Signed-off-by: Qiaowei Ren <qiaowei.ren@intel.com>
8 years agoutil: Move virPerfNew and virPerfFree
John Ferlan [Wed, 3 Aug 2016 16:38:15 +0000 (12:38 -0400)]
util: Move virPerfNew and virPerfFree

Move them to the bottom under the #ifdef code.

8 years agovirsh: Rework the perf event names into a table.
John Ferlan [Wed, 3 Aug 2016 16:30:01 +0000 (12:30 -0400)]
virsh: Rework the perf event names into a table.

Should be easier to read

8 years agovirsh: Add a forward reference to perf command from domstats --perf
John Ferlan [Wed, 3 Aug 2016 16:33:55 +0000 (12:33 -0400)]
virsh: Add a forward reference to perf command from domstats --perf

Keep the details in one place...

8 years agoutil: Add some comment details for virPerfEventType
Qiaowei Ren [Tue, 2 Aug 2016 18:43:35 +0000 (14:43 -0400)]
util: Add some comment details for virPerfEventType

Add to some details for the existing enum

8 years agoperf: Remove the switch from qemuDomainGetStatsPerf
Qiaowei Ren [Sat, 30 Jul 2016 13:57:31 +0000 (09:57 -0400)]
perf: Remove the switch from qemuDomainGetStatsPerf

Remove the unnecessary switch since all VIR_PERF_EVENT* values are fetched

8 years agoperf: rename qemuDomainGetStatsPerfRdt()
Qiaowei Ren [Sat, 16 Jul 2016 08:15:10 +0000 (16:15 +0800)]
perf: rename qemuDomainGetStatsPerfRdt()

This patch rename qemuDomainGetStatsPerfRdt() to
qemuDomainGetStatsPerfOneEvent()

Signed-off-by: Qiaowei Ren <qiaowei.ren@intel.com>
8 years agoqemu: Filter cur_balloon ABI check for certain transactions
Nikolay Shirokovskiy [Thu, 9 Jun 2016 14:32:32 +0000 (17:32 +0300)]
qemu: Filter cur_balloon ABI check for certain transactions

Since the domain lock is not held during preparation of an external XML
config, it is possible that the value can change resulting in unexpected
failures during ABI consistency checking for some save and migrate
operations.

This patch adds a new flag to skip the checking of the cur_balloon value
and then sets the destination value to the source value to ensure
subsequent checks without the skip flag will succeed.

This way it is protected from forges and is keeped up to date too.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agoxmconfigdata: drop tests for multi serial
Bob Liu [Thu, 18 Aug 2016 02:20:51 +0000 (10:20 +0800)]
xmconfigdata: drop tests for multi serial

xen-xm doesn't support mult serial devices at all, so these tests are
meaningless.

Signed-off-by: Bob Liu <bob.liu@oracle.com>
8 years agoxlconfigdata: add tests for multi serial
Bob Liu [Thu, 18 Aug 2016 02:20:50 +0000 (10:20 +0800)]
xlconfigdata: add tests for multi serial

Adding tests for domXML <-> xl.cfg conversions containing multiple
serial devices.

Signed-off-by: Bob Liu <bob.liu@oracle.com>
8 years agoxenconfig: rm format/parse multi serial for xen-xm
Bob Liu [Thu, 18 Aug 2016 02:20:49 +0000 (10:20 +0800)]
xenconfig: rm format/parse multi serial for xen-xm

xen-xm doesn't support multi serial at all, this patch drop the
domXML <-> xl.cfg conversions.

Signed-off-by: Bob Liu <bob.liu@oracle.com>
8 years agolibxl: support serial list
Bob Liu [Thu, 18 Aug 2016 02:20:48 +0000 (10:20 +0800)]
libxl: support serial list

Add support for multi serial devices, after this patch virsh can be used to
connect different serial devices of running domains. E.g.
vish # console <xxx> --devname serial<xxx>

Note:
This depends on a xen/libxl bug fix to have libxl_console_get_tty(...) correctly
returning the tty path (as opposed to always returning the first one).
[0] https://lists.xen.org/archives/html/xen-devel/2016-08/msg00438.html

Signed-off-by: Bob Liu <bob.liu@oracle.com>
8 years agovirpci: support driver_override sysfs interface
Jim Fehlig [Tue, 2 Aug 2016 03:36:45 +0000 (21:36 -0600)]
virpci: support driver_override sysfs interface

libvirt uses the new_id PCI sysfs interface to bind a PCI stub driver
to a PCI device. The new_id interface is known to be buggy and racey,
hence a more deterministic interface was introduced in the 3.12 kernel:
driver_override. For more details see

https://www.redhat.com/archives/libvir-list/2016-June/msg02124.html

For more details about the driver_override interface and examples of
its usage, see

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/drivers/pci/pci-driver.c?h=v3.12&id=782a985d7af26db39e86070d28f987cad21313c0

This patch adds support for the driver_override interface by

- adding new virPCIDevice{BindTo,UnbindFrom}StubWithOverride functions
  that use the driver_override interface
- renames the existing virPCIDevice{BindTo,UnbindFrom}Stub functions
  to virPCIDevice{BindTo,UnbindFrom}StubWithNewid to perserve existing
  behavior on new_id interface
- changes virPCIDevice{BindTo,UnbindFrom}Stub function to call one of
  the above depending on availability of driver_override

The patch includes a bit of duplicate code, but allows for easily
dropping the new_id code once support for older kernels is no
longer desired.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
8 years agolibxl: allow vendor/product addressing for USB hostdevs
Cédric Bosdonnat [Thu, 11 Aug 2016 00:39:12 +0000 (18:39 -0600)]
libxl: allow vendor/product addressing for USB hostdevs

libxl only has API to address the host USB devices by bus/device.
Find the bus/device if the user only provided the vendor/product
of the USB device.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
8 years agoAdd virHostdevFindUSBDevice to private symbols
Cédric Bosdonnat [Thu, 11 Aug 2016 00:39:11 +0000 (18:39 -0600)]
Add virHostdevFindUSBDevice to private symbols

Finding an USB device from the vendor/device values will be needed
by libxl driver to convert from vendor/device to bus/dev addresses.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
8 years agoconf: Fix initialization value of 'multi' in PCI address
Xian Han Yu [Mon, 15 Aug 2016 04:22:25 +0000 (06:22 +0200)]
conf: Fix initialization value of 'multi' in PCI address

The 'multi' element in PCI address struct used as 'virTristateSwitch',
and its default value is 'VIR_TRISTATE_SWITCH_ABSENT'. Current PCI
process use 'false' to initialization 'multi', which is ambiguously
for assignment or comparison. This patch use '{0}' to initialize
the whole PCI address struct, which fix the 'multi' initialization
and makes code more simplify and explicitly.

Signed-off-by: Xian Han Yu <xhyubj@linux.vnet.ibm.com>
8 years agoPost-release version bump to 2.3.0
Martin Kletzander [Fri, 2 Sep 2016 14:42:50 +0000 (16:42 +0200)]
Post-release version bump to 2.3.0

Signed-off-by: Martin Kletzander <mkletzan@redhat.com>
8 years agoRelease of libvirt-2.2.0
Daniel Veillard [Fri, 2 Sep 2016 13:28:51 +0000 (15:28 +0200)]
Release of libvirt-2.2.0

* docs/news.html.in: update for release
* po/*po*: regenerate

8 years agoMake --postcopy flag mandatory with --postcopy-after-precopy
Kothapally Madhu Pavan [Fri, 2 Sep 2016 11:52:13 +0000 (07:52 -0400)]
Make --postcopy flag mandatory with --postcopy-after-precopy

--postcopy-after-precopy is just an aditional flag for
postcopy migration.

Signed-off-by: Kothapally Madhu Pavan <kmp@linux.vnet.ibm.com>
8 years agotools: Don't list virsh-* under EXTRA_DIST
Michal Privoznik [Wed, 31 Aug 2016 10:52:11 +0000 (12:52 +0200)]
tools: Don't list virsh-* under EXTRA_DIST

When we wanted to break huge and unmaintainable virsh into
smaller files first thing we did was to just move funcs into
virsh-.c files and then #include them from virsh. Having it done
this way we also needed to have them listed under EXTRA_DIST.
However, things got changed since then and now all the virsh-*.c
files are proper source files. Therefore they are listed under
virsh_SOURCES too. But for some reason we forgot to remove them
from EXTRA_DIST.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
8 years agolibxl: advertise support for migration V3
Jim Fehlig [Mon, 29 Aug 2016 16:08:01 +0000 (10:08 -0600)]
libxl: advertise support for migration V3

The libxl driver has long supported migration V3 but has never
indicated so in the connectSupportsFeature API. As a result, apps
such as virt-manager that use the more generic virDomainMigrate API
fail with

libvirtError: this function is not supported by the connection driver:
virDomainMigrate

Add VIR_DRV_FEATURE_MIGRATION_V3 to the list of features marked as
supported in the connectSupportsFeature API.

8 years agotests: fix segfault in objecteventtest
Roman Bogorodskiy [Wed, 24 Aug 2016 10:37:27 +0000 (13:37 +0300)]
tests: fix segfault in objecteventtest

Test 12 from objecteventtest (createXML add event) segaults on FreeBSD
with bus error.

At some point it calls testNodeDeviceDestroy() from the test driver. And
it fails when it tries to unlock the device in the "out:" label of this
function.

Unlocking fails because the previous step was a call to
virNodeDeviceObjRemove from conf/node_device_conf.c. This function
removes the given device from the device list and cleans up the object,
including destroying of its mutex. However, it does not nullify the pointer
that was given to it.

As a result, we end up in testNodeDeviceDestroy() here:

 out:
    if (obj)
        virNodeDeviceObjUnlock(obj);

And instead of skipping this, we try to do Unlock and fail because of
malformed mutex.

Change virNodeDeviceObjRemove to use double pointer and set pointer to
NULL.

8 years agobhyve: fix disks address allocation
Roman Bogorodskiy [Sun, 28 Aug 2016 12:45:08 +0000 (15:45 +0300)]
bhyve: fix disks address allocation

As bhyve currently doesn't use controller addressing and simply
uses 1 implicit controller for 1 disk device, the scheme looks the
following:

 pci addrees -> (implicit controller) -> disk device

So in fact we identify disk devices by pci address of implicit
controller and just pass it this way to bhyve in a form:

 -s pci_addr,ahci-(cd|hd),/path/to/disk

Therefore, we cannot use virDeviceInfoPCIAddressWanted() because it
does not expect that disk devices might need PCI address assignment.

As a result, if a disk was specified without address, it will not be
generated and domain will to start.

Until proper controller addressing is implemented in the bhyve
driver, force each disk to have PCI address generated if it was not
specified by user.

8 years agoCheck for --live flag for postcopy-after-precopy migration
Kothapally Madhu Pavan [Fri, 26 Aug 2016 09:25:52 +0000 (05:25 -0400)]
Check for --live flag for postcopy-after-precopy migration

Unlike postcopy migration there is no --live flag check for
postcopy-after-precopy.

Signed-off-by: Kothapally Madhu Pavan <kmp@linux.vnet.ibm.com>
8 years agodocs: Add missing / to closing tag
Christophe Fergeau [Tue, 23 Aug 2016 22:08:56 +0000 (18:08 -0400)]
docs: Add missing / to closing tag

The iothread example for virtio-scsi should be
<driver iothread='4'/> rather than <driver iothread='4'>
for the XML to be valid.

8 years agoconf: Fix build with picky GCC
Peter Krempa [Thu, 25 Aug 2016 22:40:09 +0000 (18:40 -0400)]
conf: Fix build with picky GCC

../../src/conf/domain_conf.c:4425:21: error: potential null pointer dereference [-Werror=null-dereference]
         switch (vcpu->hotpluggable) {
                 ~~~~^~~~~~~~~~~~~~

8 years agoqemu: driver: Validate configuration when setting maximum vcpu count
Peter Krempa [Thu, 25 Aug 2016 19:30:21 +0000 (15:30 -0400)]
qemu: driver: Validate configuration when setting maximum vcpu count

Setting vcpu count when cpu topology is specified may result into an
invalid configuration. Since the topology can't be modified, reject the
setting if it doesn't match the requested topology. This will allow
fixing the topology in case it was broken.

Partially fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1370066

8 years agoconf: Don't validate vcpu count in XML parser
Peter Krempa [Thu, 25 Aug 2016 19:24:22 +0000 (15:24 -0400)]
conf: Don't validate vcpu count in XML parser

Validating the vcpu count is more intricate and doing it in the XML
parser will make previously valid configs (with older qemus) vanish.

Now that we have a very similar check in the qemu domain validation
callback we can do it in a more appropriate place.

This basically reverts commit b54de0830a.

Partially resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1370066

8 years agodoc: clarify documentation for vcpu order
Peter Krempa [Thu, 25 Aug 2016 15:41:44 +0000 (11:41 -0400)]
doc: clarify documentation for vcpu order

Make it clear that vcpu order is valid for online vcpus only and state
that it has to be specified for all vcpus or not provided at all.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1370043

8 years agoqemu: driver: Fix qemuDomainHelperGetVcpus for sparse vcpu topologies
Peter Krempa [Thu, 25 Aug 2016 18:53:06 +0000 (14:53 -0400)]
qemu: driver: Fix qemuDomainHelperGetVcpus for sparse vcpu topologies

ce43cca0e refactored the helper to prepare it for sparse topologies but
forgot to fix the iterator used to fill the structures. This would
result into a weirdly sparse populated array and possible out of bounds
access and crash once sparse vcpu topologies were allowed.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1369988

8 years agovirsh: vcpuinfo: Report vcpu number from the structure rather than it's position
Peter Krempa [Thu, 25 Aug 2016 18:48:52 +0000 (14:48 -0400)]
virsh: vcpuinfo: Report vcpu number from the structure rather than it's position

virVcpuInfo contains the vcpu number that the data refers to. Report
what's returned by the daemon rather than the sequence number as with
sparse vcpu topologies they won't match.

8 years agovz: getting bus type for containers
Mikhail Feoktistov [Mon, 15 Aug 2016 16:02:49 +0000 (12:02 -0400)]
vz: getting bus type for containers

We should query bus type for containers too, like for VM.
In openstack we add volume disk like SCSI, so we can't
hardcode SATA bus.

8 years agovz: update domain cache after device updates
Nikolay Shirokovskiy [Thu, 25 Aug 2016 08:33:35 +0000 (11:33 +0300)]
vz: update domain cache after device updates

8 years agovz: fixed race in vzDomainAttach/DettachDevice
Olga Krishtal [Thu, 18 Aug 2016 11:57:14 +0000 (14:57 +0300)]
vz: fixed race in vzDomainAttach/DettachDevice

While dettaching/attaching device in OpenStack, nova
calls vzDomainDettachDevice twice, because the update of the internal
configuration of the ct comes a bit latter than the update event.
As the result, we suffer from the second call to dettach the same device.

Signed-off-by: Olga Krishtal <okrishtal@virtuozzo.com>
8 years agovz: added VIR_MIGRATE_PARAM_BANDWIDTH param handling
Pavel Glushchak [Thu, 25 Aug 2016 14:00:25 +0000 (17:00 +0300)]
vz: added VIR_MIGRATE_PARAM_BANDWIDTH param handling

libvirt-python passes parameter bandwidth = 0
by default. This means that bandwidth is unlimited.
VZ driver doesn't support bandwidth rate limiting,
but we still need to handle it and fail if bandwidth > 0.

Signed-off-by: Pavel Glushchak <pglushchak@virtuozzo.com>
8 years agovz: implicitly support additional migration flags
Pavel Glushchak [Thu, 25 Aug 2016 14:00:24 +0000 (17:00 +0300)]
vz: implicitly support additional migration flags

* Added VIR_MIGRATE_LIVE, VIR_MIGRATE_UNDEFINE_SOURCE and
  VIR_MIGRATE_PERSIST_DEST to supported migration flags

Signed-off-by: Pavel Glushchak <pglushchak@virtuozzo.com>
8 years agoqemu: set tap device online for type='ethernet'
Laine Stump [Thu, 25 Aug 2016 05:46:37 +0000 (01:46 -0400)]
qemu: set tap device online for type='ethernet'

When support for auto-creating tap devices was added to <interface
type='ethernet'> in commit 9c17d6, the code assumed that
virNetDevTapCreate() would honor the VIR_NETDEV_TAP__CREATE_IFUP flag
that is supported by virNetDevTapCreateInBridgePort(). That isn't the
case - the latter function performs several operations, and one of
them is setting the tap device online. But virNetDevTapCreate() *only*
creates the tap device, and relies on the caller to do everything
else, so qemuInterfaceEthernetConnect() needs to call
virNetDevSetOnline() after the device is successfully created.

8 years agoqemu: remove unnecessary setting of tap device online state
Laine Stump [Thu, 25 Aug 2016 05:18:25 +0000 (01:18 -0400)]
qemu: remove unnecessary setting of tap device online state

The linkstate setting of an <interface> is only meant to change the
online status reported to the guest system by the emulated network
device driver in qemu, but when support for auto-creating tap devices
for <interface type='ethernet'> was added in commit 9717d6, a chunk of
code was also added to qemuDomainChangeNetLinkState() that sets the
online status of the tap device (i.e. the *host* side of the
interface) for type='ethernet'. This was never done for tap devices
used in type='bridge' or type='network' interfaces, nor was it done in
the past for tap devices created by external scripts for
type='ethernet', so we shouldn't be doing it now.

This patch removes the bit of code in qemuDomainChangeNetLinkState()
that modifies online status of the tap device.

8 years agoqemu: fix ethernet network type ip/route assign
Vasiliy Tolstov [Wed, 24 Aug 2016 16:09:22 +0000 (19:09 +0300)]
qemu: fix ethernet network type ip/route assign

The call to virNetDevIPInfoAddToDev() that sets up tap device IP
addresses and routes was somehow incorrectly placed in
qemuInterfaceStopDevice() instead of qemuInterfaceStartDevice() in
commit fe8567f6.  This fixes that error by moving the call to
virNetDevIPInfoAddToDev() to qemuInterfaceStartDevice().

Signed-off-by: Vasiliy Tolstov <v.tolstov@selfip.ru>
8 years agoqemu: hotplug: Add support for VCPU unplug
Peter Krempa [Tue, 16 Aug 2016 13:02:11 +0000 (15:02 +0200)]
qemu: hotplug: Add support for VCPU unplug

This patch removes the old vcpu unplug code completely and replaces it
with the new code using device_del. The old hotplug code basically never
worked with any recent qemu and thus is useless.

As the new code is using device_del all the implications of using it
are present. Contrary to the device deletion code, the vcpu deletion
code fails if the unplug request is not executed in time.

8 years agoqemu: hotplug: Allow marking unplugged devices by alias
Peter Krempa [Thu, 4 Aug 2016 21:53:13 +0000 (23:53 +0200)]
qemu: hotplug: Allow marking unplugged devices by alias

Add a overlay function that takes the alias directly rather than
extracting it from a device info.

8 years agoqemu: Use modern vcpu hotplug approach if possible
Peter Krempa [Tue, 16 Aug 2016 12:44:26 +0000 (14:44 +0200)]
qemu: Use modern vcpu hotplug approach if possible

To allow unplugging the vcpus, hotplugging of vcpus on platforms which
require to plug multiple logical vcpus at once or plugging them in an
arbitrary order it's necessary to use the new device_add interface for
vcpu hotplug.

This patch adds support for the device_add interface using the old
setvcpus API by implementing an algorithm to select the appropriate
entities to plug in.

8 years agoqemu: command: Add support for sparse vcpu topologies
Peter Krempa [Thu, 4 Aug 2016 12:36:24 +0000 (14:36 +0200)]
qemu: command: Add support for sparse vcpu topologies

Add support for using the new approach to hotplug vcpus using device_add
during startup of qemu to allow sparse vcpu topologies.

There are a few limitations imposed by qemu on the supported
configuration:
- vcpu0 needs to be always present and not hotpluggable
- non-hotpluggable cpus need to be ordered at the beginning
- order of the vcpus needs to be unique for every single hotpluggable
  entity

Qemu also doesn't really allow to query the information necessary to
start a VM with the vcpus directly on the commandline. Fortunately they
can be hotplugged during startup.

The new hotplug code uses the following approach:
- non-hotpluggable vcpus are counted and put to the -smp option
- qemu is started
- qemu is queried for the necessary information
- the configuration is checked
- the hotpluggable vcpus are hotplugged
- vcpus are started

This patch adds a lot of checking code and enables the support to
specify the individual vcpu element with qemu.

8 years agoqemu: process: Copy final vcpu order information into the vcpu definition
Peter Krempa [Thu, 4 Aug 2016 12:23:25 +0000 (14:23 +0200)]
qemu: process: Copy final vcpu order information into the vcpu definition

The vcpu order information is extracted only for hotpluggable entities,
while vcpu definitions belonging to the same hotpluggable entity need
to all share the order information.

We also can't overwrite it right away in the vcpu info detection code as
the order is necessary to add the hotpluggable vcpus enabled on boot in
the correct order.

The helper will store the order information in places where we are
certain that it's necessary.

8 years agoqemu: command: Add helper to convert vcpu definition to JSON props
Peter Krempa [Thu, 4 Aug 2016 12:12:39 +0000 (14:12 +0200)]
qemu: command: Add helper to convert vcpu definition to JSON props

For use on the monitor we need to format certain parts of the vcpu
private definition into a JSON object. Add a helper.

8 years agoqemu: migration: Prepare for non-contiguous vcpu configurations
Peter Krempa [Thu, 4 Aug 2016 11:57:46 +0000 (13:57 +0200)]
qemu: migration: Prepare for non-contiguous vcpu configurations

Introduce a new migration cookie flag that will be used for any
configurations that are not compatible with libvirt that would not
support the specific vcpu hotplug approach. This will make sure that old
libvirt does not fail to reproduce the configuration correctly.

8 years agoconf: Add XML for individual vCPU hotplug
Peter Krempa [Tue, 2 Aug 2016 15:58:43 +0000 (17:58 +0200)]
conf: Add XML for individual vCPU hotplug

Individual vCPU hotplug requires us to track the state of any vCPU. To
allow this add the following XML:

<domain>
  ...
  <vcpu current='2'>3</vcpu>
  <vcpus>
    <vcpu id='0' enabled='yes' hotpluggable='no' order='1'/>
    <vcpu id='1' enabled='yes' hotpluggable='yes' order='2'/>
    <vcpu id='1' enabled='no' hotpluggable='yes'/>
  </vcpus>
  ...

The 'enabled' attribute allows to control the state of the vcpu.
'hotpluggable' controls whether given vcpu can be hotplugged and 'order'
allows to specify the order to add the vcpus.

8 years agoutil: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread
Peter Krempa [Thu, 4 Aug 2016 21:36:38 +0000 (23:36 +0200)]
util: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread

8 years agoqemu: domain: Prepare for VCPUs vanishing while libvirt is not running
Peter Krempa [Fri, 5 Aug 2016 12:48:27 +0000 (14:48 +0200)]
qemu: domain: Prepare for VCPUs vanishing while libvirt is not running

Similarly to devices the guest may allow unplug of the VCPU if libvirt
is down. To avoid problems, refresh the vcpu state on reconnect. Don't
mess with the vcpu state otherwise.

8 years agoqemu: domain: Extract cpu-hotplug related data
Peter Krempa [Sun, 31 Jul 2016 12:05:04 +0000 (14:05 +0200)]
qemu: domain: Extract cpu-hotplug related data

Now that the monitor code gathers all the data we can extract it to
relevant places either in the definition or the private data of a vcpu.

As only thread id is broken for TCG guests we may extract the rest of
the data and just skip assigning of the thread id. In case where qemu
would allow cpu hotplug in TCG mode this will make it work eventually.

8 years agotests: cpu-hotplug: Add data for ppc64 without threads enabled
Peter Krempa [Fri, 29 Jul 2016 17:55:29 +0000 (19:55 +0200)]
tests: cpu-hotplug: Add data for ppc64 without threads enabled

The reported data is unusual so add it to the test suite.

8 years agotests: cpu-hotplug: Add data for ppc64 out-of-order hotplug
Peter Krempa [Fri, 29 Jul 2016 17:44:43 +0000 (19:44 +0200)]
tests: cpu-hotplug: Add data for ppc64 out-of-order hotplug

Test the algorithm that extracts the order in which the vcpu entries
were plugged in on a sample of data created by plugging in vcpus
arbitrarily.

8 years agotests: cpu-hotplug: Add data for ppc64 platform including hotplug
Peter Krempa [Fri, 29 Jul 2016 17:24:22 +0000 (19:24 +0200)]
tests: cpu-hotplug: Add data for ppc64 platform including hotplug

Power 8 platform's basic hotpluggable unit is a core rather than a
thread for x86_64 family. This introduces most of the complexity of the
matching code and thus needs to be tested.

The test data contain data captured from in-order cpu hotplug and
unplug operations.

8 years agotests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus
Peter Krempa [Tue, 23 Aug 2016 21:05:52 +0000 (17:05 -0400)]
tests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus

During review it was reported that adding at least 11 vcpus creates a
collision of prefixes in the monitor matching algorithm. Add a test case
to verify that the problem won't happen.

8 years agotests: Add test infrastructure for qemuMonitorGetCPUInfo
Peter Krempa [Fri, 29 Jul 2016 16:08:06 +0000 (18:08 +0200)]
tests: Add test infrastructure for qemuMonitorGetCPUInfo

As the combination algorithm is rather complex and ugly it's necessary
to make sure it works properly. Add test suite infrastructure for
testing it along with a basic test based on x86_64 platform.

8 years agoqemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data
Peter Krempa [Mon, 1 Aug 2016 11:56:23 +0000 (13:56 +0200)]
qemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data

For hotplug purposes it's necessary to retrieve data using
query-hotpluggable-cpus while the old query-cpus API report thread IDs
and order of hotplug.

This patch adds code that merges the data using a rather non-trivial
algorithm and fills the data to the qemuMonitorCPUInfo structure for
adding to appropriate place in the domain definition.

8 years agoqemu: monitor: Add support for calling query-hotpluggable-cpus
Peter Krempa [Fri, 8 Jul 2016 11:52:11 +0000 (13:52 +0200)]
qemu: monitor: Add support for calling query-hotpluggable-cpus

Add support for retrieving information regarding hotpluggable cpu units
supported by qemu. Data returned by the command carries information
needed to figure out the granularity of hotplug, the necessary cpu type
name and the topology information.

Note that qemu doesn't specify any particular order of the entries thus
it's necessary sort them by socket_id, core_id and thread_id to the
order libvirt expects.

8 years agoqemu: monitor: Extract QOM path from query-cpus reply
Peter Krempa [Thu, 28 Jul 2016 08:33:10 +0000 (10:33 +0200)]
qemu: monitor: Extract QOM path from query-cpus reply

To allow matching up the data returned by query-cpus to entries in the
query-hotpluggable-cpus reply for CPU hotplug it's necessary to extract
the QOM path as it's the only link between the two.

8 years agoqemu: capabilities: Extract availability of new cpu hotplug for machine types
Peter Krempa [Fri, 29 Jul 2016 07:45:19 +0000 (09:45 +0200)]
qemu: capabilities: Extract availability of new cpu hotplug for machine types

QEMU reports whether 'query-hotpluggable-cpus' is supported for a given
machine type. Extract and cache the information using the capability
cache.

When copying the capabilities for a new start of qemu, mask out the
presence of QEMU_CAPS_QUERY_HOTPLUGGABLE_CPUS if the machine type
doesn't support hotpluggable cpus.

8 years agoqemu: Forbid config when topology based cpu count doesn't match the config
Peter Krempa [Mon, 1 Aug 2016 08:35:04 +0000 (10:35 +0200)]
qemu: Forbid config when topology based cpu count doesn't match the config

As of qemu commit:
commit a32ef3bfc12c8d0588f43f74dcc5280885bbdb30
Author: Thomas Huth <thuth@redhat.com>
Date:   Wed Jul 22 15:59:50 2015 +0200

    vl: Add another sanity check to smp_parse() function

v2.4.0-952-ga32ef3b

configuration where the maximum CPU count doesn't match the topology is
rejected. Prior to that only configurations where the topology would
contain more cpus than the maximum count would be rejected.

Use QEMU_CAPS_QUERY_HOTPLUGGABLE_CPUS as a relevant recent enough
witness to avoid breaking old configs.

8 years agoqemu: Add capability for query-hotpluggable-cpus command
Peter Krempa [Thu, 23 Jun 2016 11:56:12 +0000 (13:56 +0200)]
qemu: Add capability for query-hotpluggable-cpus command

8 years agoqemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs
Peter Krempa [Mon, 1 Aug 2016 11:44:25 +0000 (13:44 +0200)]
qemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs

Prepare to extract more data by returning an array of structs rather than
just an array of thread ids. Additionally report fatal errors separately
from qemu not being able to produce data.

8 years agoqemu: monitor: Return structures from qemuMonitorGetCPUInfo
Peter Krempa [Mon, 1 Aug 2016 05:43:32 +0000 (07:43 +0200)]
qemu: monitor: Return structures from qemuMonitorGetCPUInfo

The function will gradually add more returned data. Return a struct for
every vCPU containing the data.

8 years agostorage_backend_rbd: fix typos
Chen Hanxiao [Wed, 24 Aug 2016 07:25:49 +0000 (15:25 +0800)]
storage_backend_rbd: fix typos

s/failed/failed to

Signed-off-by: Chen Hanxiao <chenhanxiao@gmail.com>
8 years agovirsh: use vshError consistently after virBufferError checks
Pino Toscano [Wed, 24 Aug 2016 14:14:25 +0000 (16:14 +0200)]
virsh: use vshError consistently after virBufferError checks

If virBufferError() reports an error, then vshError() is needed to
report the error situation instead of a simple vshError().

8 years agovirsh: avoid i18n puzzle
Pino Toscano [Wed, 24 Aug 2016 14:14:24 +0000 (16:14 +0200)]
virsh: avoid i18n puzzle

Use the full versions of the message, instead of composing a base
message with what was updated; the change makes the messages properly
translatable, since different parts of a sentence might need different
declensions for example.

8 years agovirsh: respect -q/--quiet more
Pino Toscano [Wed, 24 Aug 2016 14:14:23 +0000 (16:14 +0200)]
virsh: respect -q/--quiet more

Turn various vshPrint() informative messages into vshPrintExtra(), so
they are not printed when requesting the quiet mode; neither XML/info
outputs nor the results of commands are affected.
Also change the expected outputs of the virsh-undefine test, since virsh
is invoked in quiet mode there.

Some informative messages might still be converted (and thus silenced
when in quiet mode), but this is an improvements nonetheless.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1358179

8 years agoFix remote_protocol-structs after recent commit
Peter Krempa [Tue, 23 Aug 2016 19:47:10 +0000 (15:47 -0400)]
Fix remote_protocol-structs after recent commit

Commit 0adc9d26ae0cfbb4aa227e89424f3d48bb977da0 broke the build since
remote_protocol-structs was not updated.

8 years agovz: add ACL checks to API calls
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:38 +0000 (17:32 +0300)]
vz: add ACL checks to API calls

  vzDomainMigrateConfirm3Params is whitelisted. Otherwise we need to
move removing domain from domain list from perform to confirm
step. This would further imply adding a flag and check that migration
is in progress to prohibit mistakenly (maliciously) removing domains
on confirm step. vz version of p2p also need to be fixed to include confirm step.
One would also need to add means to cleanup pending migration
on client disconnect as now is has state across several API
calls.

  On the other hand current version of confirm step is totaly
harmless thus it is easier to whitelist it at the moment.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
Signed-off-by: Maxim Nestratov <mnestratov@virtuozzo.com>
8 years agoremote: rename protocol names for close callbacks
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:37 +0000 (17:32 +0300)]
remote: rename protocol names for close callbacks

This way we make naming consistent to API calls and make subsequent
ACL checks possible (otherwise ACL check would discover name
discrepancies).

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: prepare migration for ACL checks
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:36 +0000 (17:32 +0300)]
vz: prepare migration for ACL checks

  ACL check on perform step should be in API call itself to make ACL
checking script pass. Thus we need to reorganize code to obtain
domain object in perform API itself. Most of this is straight
forward, the only nuance is dropping locks on lengthy remote
operations.
  The other motivation is to have only perform step ACL checks for
p2p migration instead of both begin in perform if we can leave
ACL check in vzDomainMigratePerformStep.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: expand setting memory API calls
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:35 +0000 (17:32 +0300)]
vz: expand setting memory API calls

We need it to prepare the calls for ACL checks otherwise ACL checking
script will fail.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: add missing flagged versions of API functions
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:34 +0000 (17:32 +0300)]
vz: add missing flagged versions of API functions

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: factor out converting block stats to params
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:33 +0000 (17:32 +0300)]
vz: factor out converting block stats to params

This action deserves its own function and makes main API call
structure much cleaner.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: factor out block stats impl
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:32 +0000 (17:32 +0300)]
vz: factor out block stats impl

Now we can use intended ACL check for both API calls.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: implement plain create API thru createFlags instead of visa versa
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:31 +0000 (17:32 +0300)]
vz: implement plain create API thru createFlags instead of visa versa

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
8 years agovz: expand start/stop/... APIs for ACL checks
Nikolay Shirokovskiy [Fri, 24 Jun 2016 14:32:30 +0000 (17:32 +0300)]
vz: expand start/stop/... APIs for ACL checks

  The original motivation is to expand API calls like start/stop etc so that
the ACL checks could be added. But this patch has its own befenits.

1. functions like prlsdkStart/Stop use common routine to wait for
job without domain lock. They become more self contained and do
not return intermediate PRL_RESULT.

2. vzDomainManagedSave do not update cache twice.

Signed-off-by: Nikolay Shirokovskiy <nshirokovskiy@virtuozzo.com>
Signed-off-by: Maxim Nestratov <mnestratov@virtuozzo.com>
8 years agonetwork: Need to free formatted addr in networkDnsmasqConfContents
John Ferlan [Sat, 20 Aug 2016 13:26:26 +0000 (09:26 -0400)]
network: Need to free formatted addr in networkDnsmasqConfContents

Commit id '0b6336c2' formatted the 'addr', but didn't VIR_FREE it.

Found by Coverity.

8 years agoremove the dead code this patch is to remove the dead code Signed-off-by: JieWang...
JieWang [Mon, 22 Aug 2016 12:17:37 +0000 (20:17 +0800)]
remove the dead code this patch is to remove the dead code Signed-off-by: JieWang <wangjie88@huawei.com>

Signed-off-by: JieWang <wangjie88@huawei.com>
8 years agoqemu: Fix crash hot plugging luks volume
John Ferlan [Wed, 17 Aug 2016 14:25:43 +0000 (10:25 -0400)]
qemu: Fix crash hot plugging luks volume

https://bugzilla.redhat.com/show_bug.cgi?id=1367259

Crash occurs because 'secrets' is being dereferenced in call:

        if (qemuDomainSecretSetup(conn, priv, secinfo, disk->info.alias,
                                  VIR_SECRET_USAGE_TYPE_VOLUME, NULL,
                                  &src->encryption->secrets[0]->seclookupdef,
                                  true) < 0)

(gdb) p *src->encryption
$1 = {format = 2, nsecrets = 0, secrets = 0x0, encinfo = {cipher_size = 0,
    cipher_name = 0x0, cipher_mode = 0x0, cipher_hash = 0x0, ivgen_name = 0x0,
    ivgen_hash = 0x0}}
(gdb) bt
    priv=priv@entry=0x7fffc03be160, disk=disk@entry=0x7fffb4002ae0)
    at qemu/qemu_domain.c:1087
    disk=0x7fffb4002ae0, vm=0x7fffc03a2580, driver=0x7fffc02ca390,
    conn=0x7fffb00009a0) at qemu/qemu_hotplug.c:355

Upon entry to qemuDomainAttachVirtioDiskDevice, src->encryption points
at a valid 'secret' buffer w/ nsecrets == 1; however, the call to
qemuDomainDetermineDiskChain will call virStorageFileGetMetadata
and eventually virStorageFileGetMetadataInternal where the src->encryption
was overwritten when probing the volume.

Commit id 'a48c7141' added code to virStorageFileGetMetadataInternal
to determine if the disk/volume would use/need encryption and allocated
a meta->encryption. This overwrote an existing encryption buffer
already provided by the XML

This patch adds a check for meta->encryption already present before
just allocating and overwriting an existing buffer. It then checks the
existing encryption data to ensure the XML provided format for the
disk matches the expected format read from the disk and errors if there
is a mismatch.

8 years agonetwork: allow limiting a <forwarder> element to certain domains
Laine Stump [Fri, 12 Aug 2016 02:28:27 +0000 (22:28 -0400)]
network: allow limiting a <forwarder> element to certain domains

For some unknown reason the original implementation of the <forwarder>
element only took advantage of part of the functionality in the
dnsmasq feature it exposes - it allowed specifying the ip address of a
DNS server which *all* DNS requests would be forwarded to, like this:

   <forwarder addr='192.168.123.25'/>

This is a frontend for dnsmasq's "server" option, which also allows
you to specify a domain that must be matched in order for a request to
be forwarded to a particular server. This patch adds support for
specifying the domain. For example:

   <forwarder domain='example.com' addr='192.168.1.1'/>
   <forwarder domain='www.example.com'/>
   <forwarder domain='travesty.org' addr='10.0.0.1'/>

would forward requests for bob.example.com, ftp.example.com and
joe.corp.example.com all to the DNS server at 192.168.1.1, but would
forward requests for travesty.org and www.travesty.org to
10.0.0.1. And due to the second line, requests for www.example.com,
and odd.www.example.com would be resolved by the libvirt network's own
DNS server (i.e. thery wouldn't be immediately forwarded) even though
they also match 'example.com' - the match is given to the entry with
the longest matching domain. DNS requests not matching any of the
entries would be resolved by the libvirt network's own DNS server.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1331796

8 years agonetwork: allow disabling dnsmasq's DNS server
Laine Stump [Thu, 11 Aug 2016 21:29:43 +0000 (17:29 -0400)]
network: allow disabling dnsmasq's DNS server

If you define a libvirt virtual network with one or more IP addresses,
it starts up an instance of dnsmasq. It's always been possible to
avoid dnsmasq's dhcp server (simply don't include a <dhcp> element),
but until now it wasn't possible to avoid having the DNS server
listening; even if the network has no <dns> element, it is started
using default settings.

This patch adds a new attribute to <dns>: enable='yes|no'. For
backward compatibility, it defaults to 'yes', but if you don't want a
DNS server created for the network, you can simply add:

   <dns enable='no'/>

to the network configuration, and next time the network is started
there will be no dns server created (if there is dhcp configuration,
dnsmasq will be started with "port=0" which disables the DNS server;
if there is no dhcp configuration, dnsmasq won't be started at all).