]> git.ipfire.org Git - thirdparty/libvirt.git/log
thirdparty/libvirt.git
2 days agotests: validate an XML config with USB vendor/product set master
Daniel P. Berrangé [Thu, 26 Jun 2025 08:45:36 +0000 (09:45 +0100)] 
tests: validate an XML config with USB vendor/product set

The USB vendor/product is usually translated into a device/bus at
startup using the hostdev logic. We don't run the latter in the
unit test suite, but we can fake it by hardcoding a translation.
This demonstrates that we format the command line with the normal
device/bus properties, even when vendor/product is set.

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2 days agorpm: disable sanlock when QEMU is disabled
Daniel P. Berrangé [Thu, 2 Oct 2025 14:11:39 +0000 (15:11 +0100)] 
rpm: disable sanlock when QEMU is disabled

The meson.build rules skip sanlock when QEMU is disabled, so the RPM
must not try to create the -sanlock sub-RPM.

Reviewed-by: Martin Kletzander <mkletzan@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
2 days agorpc: fix race against dtrace probe generator
Daniel P. Berrangé [Thu, 2 Oct 2025 13:16:12 +0000 (14:16 +0100)] 
rpc: fix race against dtrace probe generator

The virt_socket_lib library has a dep on dtrace_gen_headers, but
the virprobe.h file (which includes the libvirt_probes.h) is also
used from virnetserverclient.c and virkeepalive.c files which do
not directly depend on virt_socket_lib. Thus it is possible for
the latter files to be built before the libvirt_probes.h file
has had its content written.

Reviewed-by: Martin Kletzander <mkletzan@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
4 days agoPost-release version bump to 11.9.0
Jiri Denemark [Wed, 1 Oct 2025 10:50:43 +0000 (12:50 +0200)] 
Post-release version bump to 11.9.0

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
4 days agoRelease of libvirt-11.8.0 v11.8.0
Jiri Denemark [Wed, 1 Oct 2025 10:46:01 +0000 (12:46 +0200)] 
Release of libvirt-11.8.0

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
4 days agoTranslated using Weblate (Portuguese)
Américo Monteiro [Wed, 1 Oct 2025 02:39:34 +0000 (02:39 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 89.2% (9788 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 89.1% (9768 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
6 days agoNEWS: Fix format of XML elements/attributes in v11.8.0 section v11.8.0-rc2
Michal Privoznik [Mon, 29 Sep 2025 08:36:04 +0000 (10:36 +0200)] 
NEWS: Fix format of XML elements/attributes in v11.8.0 section

It's a good practice to use a different style of formatting for
literal values like XML element/attribute names, functions, etc.
In this specific case, the 'acpi' and 'nodeset' names should be
formatted using two single quotes instead of double quote.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
6 days agoNEWS: Document features/improvements/bug fixes I've participated in
Michal Privoznik [Mon, 29 Sep 2025 08:34:55 +0000 (10:34 +0200)] 
NEWS: Document features/improvements/bug fixes I've participated in

There are some features/improvements/bug fixes I've either
contributed or reviewed/merged. Document them for upcoming
release.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
6 days agoTranslated using Weblate (Chinese (Simplified) (zh_CN))
zhanchun li [Mon, 29 Sep 2025 00:36:58 +0000 (00:36 +0000)] 
Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 97.6% (10705 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/zh_CN/

Signed-off-by: zhanchun li <lzc777@126.com>
6 days agoTranslated using Weblate (Korean)
김인수 [Mon, 29 Sep 2025 00:36:58 +0000 (00:36 +0000)] 
Translated using Weblate (Korean)

Currently translated at 100.0% (10962 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/ko/

Signed-off-by: 김인수 <simmon@nplob.com>
6 days agoTranslated using Weblate (Portuguese)
Américo Monteiro [Mon, 29 Sep 2025 00:36:57 +0000 (00:36 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 88.5% (9704 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 88.1% (9665 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 87.7% (9616 of 10962 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
9 days agobhyve: hooks: improve process start error handling
Roman Bogorodskiy [Sun, 21 Sep 2025 18:16:42 +0000 (20:16 +0200)] 
bhyve: hooks: improve process start error handling

When the virBhyveProcessStart() fails early, make sure to execute
the "stopped" and "release" hooks.

Spotted while running TCK hooks tests against the bhyve driver.

Signed-off-by: Roman Bogorodskiy <bogorodskiy@gmail.com>
Reviewed-by: Martin Kletzander <mkletzan@redhat.com>
10 days agoUpdate translation files
Weblate [Thu, 25 Sep 2025 09:51:25 +0000 (09:51 +0000)] 
Update translation files

Updated by "Update PO files to match POT (msgmerge)" hook in Weblate.

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/

Signed-off-by: Fedora Weblate Translation <i18n@lists.fedoraproject.org>
10 days agopo: Refresh potfile for v11.8.0 v11.8.0-rc1
Jiri Denemark [Thu, 25 Sep 2025 09:46:12 +0000 (11:46 +0200)] 
po: Refresh potfile for v11.8.0

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
11 days agoTranslated using Weblate (Portuguese)
Américo Monteiro [Wed, 24 Sep 2025 17:06:42 +0000 (17:06 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 87.2% (9557 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
11 days agoTranslated using Weblate (Spanish)
Weblate [Wed, 24 Sep 2025 17:06:41 +0000 (17:06 +0000)] 
Translated using Weblate (Spanish)

Currently translated at 76.9% (8426 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: Weblate <noreply-mt-weblate@weblate.org>
11 days agoTranslated using Weblate (Spanish)
Fco. Javier F. Serrador [Wed, 24 Sep 2025 17:06:41 +0000 (17:06 +0000)] 
Translated using Weblate (Spanish)

Currently translated at 76.9% (8426 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: "Fco. Javier F. Serrador" <fserrador@gmail.com>
11 days agotests: qemuxmlconftest: test locking with older virtiofsd
Ján Tomko [Thu, 17 Jul 2025 17:41:23 +0000 (19:41 +0200)] 
tests: qemuxmlconftest: test locking with older virtiofsd

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agotests: qemuxmlconftests: test virtiofsd command line too
Ján Tomko [Thu, 17 Jul 2025 17:11:43 +0000 (19:11 +0200)] 
tests: qemuxmlconftests: test virtiofsd command line too

Fake the capabilities based on the QEMU version so that we can test
the command line for both the C version of virtiofsd (removed in QEMU
8.0.0) and the Rust version.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agotests: qemuxmlconf: virtiofs: remove locking from the readonly test case
Ján Tomko [Thu, 17 Jul 2025 17:32:52 +0000 (19:32 +0200)] 
tests: qemuxmlconf: virtiofs: remove locking from the readonly test case

The combination of locking + readonly is bogus, because there has never
been a virtiofsd release that supported both.

Locking was a feature of the C-based virtiofsd that was living in the
QEMU tree until v8.0.0 and the readonly feature was only introduced
in the Rust version of virtiofsd.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agotests: qemuxmlconftest: test passt command line too
Ján Tomko [Thu, 17 Jul 2025 16:45:29 +0000 (18:45 +0200)] 
tests: qemuxmlconftest: test passt command line too

Introduce testing of the generated command line arguments
of helper binaries too, not just QEMU.

Start with passt.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agoexport qemuVirtioFSBuildCommandLine
Ján Tomko [Thu, 17 Jul 2025 16:42:21 +0000 (18:42 +0200)] 
export qemuVirtioFSBuildCommandLine

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agotests: qemuxmlconftest: Introduce testQemuConfMarkUsed
Ján Tomko [Thu, 17 Jul 2025 16:19:44 +0000 (18:19 +0200)] 
tests: qemuxmlconftest: Introduce testQemuConfMarkUsed

Make the code readable enough to not need a comment.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agotests: qemuxmlconftests: store suffix in testQemuInfo
Ján Tomko [Thu, 17 Jul 2025 15:34:59 +0000 (17:34 +0200)] 
tests: qemuxmlconftests: store suffix in testQemuInfo

Next patch will need this to construct the path to the output
file in a deeper level of nesting.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agoqemu: passt: split out qemuPasstBuildCommand
Ján Tomko [Thu, 17 Jul 2025 14:09:42 +0000 (16:09 +0200)] 
qemu: passt: split out qemuPasstBuildCommand

Separate the command line building to make it testable.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
11 days agonews: Update for firmware selection fixes
Andrea Bolognani [Thu, 31 Jul 2025 15:06:55 +0000 (17:06 +0200)] 
news: Update for firmware selection fixes

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
11 days agoqemu: Fix matching for read/write firmware
Andrea Bolognani [Thu, 31 Jul 2025 14:50:46 +0000 (16:50 +0200)] 
qemu: Fix matching for read/write firmware

We currently always pick a read-only firmware unless we are
explicitly asked for a read/write one, which is probably what
most people expect anyway but doesn't really make sense
otherwise: if no specific requirement has been provided by the
user, both read-only and read/write firmwares should be
allowed to match.

This won't result in any change in practice, since distros are
not shipping read/write builds of edk2 anyway. If they started
doing that, it would be their responsibility to ensure that
they are ordered after the read-only builds.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
11 days agoqemu: Fix matching for stateless/combined firmware
Andrea Bolognani [Wed, 30 Jul 2025 15:35:23 +0000 (17:35 +0200)] 
qemu: Fix matching for stateless/combined firmware

The current code assumes that a stateless firmware has to be
explicitly requested by the user, and should never be picked
otherwise. This means that, for example, domains configured to
use SEV-SNP are forced to explicitly request for the firmware
to be stateless.

Additionally, we assume that only split firmware is suitable
for the stateful use case, whereas a combined firmware image
would also do the job.

As a result of these changes, the failing SEV-SNP test case
that was added recently passes, and so do the test cases
requesting read/write firmware.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
11 days agotests: Add tests for SEV firmware selection
Andrea Bolognani [Wed, 30 Jul 2025 12:56:00 +0000 (14:56 +0200)] 
tests: Add tests for SEV firmware selection

One of the new test cases demonstrates how firmware
autoselection doesn't currently work correctly for domains
using SEV-SNP: the descriptor for a suitable firmware exists,
and yet it doesn't get picked up.

Another test cases shows that, while firmware autoselection
succeeds for non-SNP SEV domains, the results are not the
expected ones: the generic (stateful) edk2 build is used
instead of the SEV-specific (stateless) one. This will be
addressed in a future patch by updating the descriptors.

Finally, one test case provides coverage for the uncommon
scenario of stateful firmware being explicitly requested by
the user.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
11 days agotests: Improve AMD SEV-related tests
Jim Fehlig [Mon, 18 Aug 2025 22:59:29 +0000 (16:59 -0600)] 
tests: Improve AMD SEV-related tests

SEV and SEV-ES guests should use q35 machine type and uefi. Adjust
existing tests accordingly.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
11 days agotests: Minimize SEV tests
Andrea Bolognani [Wed, 13 Aug 2025 13:16:24 +0000 (15:16 +0200)] 
tests: Minimize SEV tests

Removing all unnecessary devices and elements makes it easier
to focus on the actual purpose of these tests (configuring
the SEV-specific bits).

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
11 days agotests: Tweak descriptor for combined firmware
Andrea Bolognani [Wed, 30 Jul 2025 15:01:47 +0000 (17:01 +0200)] 
tests: Tweak descriptor for combined firmware

This kind of firmware build is not shipped in Fedora, where
most descriptors in our test suite come from, so we had to
make it up. It was based off the Secure Boot-enabled edk2
build, and the filename it points to is the same.

That has been fine so far since it's not actually being picked
up by any of the test cases, but that's going to change soon
and when it does we want to be able to avoid any confusion.

Signed-off-by: Andrea Bolognani <abologna@redhat.com>
Reviewed-by: Jim Fehlig <jfehlig@suse.com>
12 days agoqemuMigrationSrcIsSafeDisk: Allow non-shared qcow2's with raw data file
Peter Krempa [Tue, 9 Sep 2025 13:56:10 +0000 (15:56 +0200)] 
qemuMigrationSrcIsSafeDisk: Allow non-shared qcow2's with raw data file

A qcow2 image which uses a data file and the 'data_file_raw' flag is
effectively a raw image with the qcow2 wrapper used only to store
metadata (block dirty bitmaps).

Since the dirty bitmaps are always migrated using the migration stream
it's technically not required that the qcow2 overlay itself is shared
between the destinations.

Management tools like Kubevirt want to migrate VMs which have a qcow2
overlay with the above config stored in a location that is not shared,
but the data file itself is.

This patch adds code that skips the validation of the overlay since it's
not needed to ensure data consistency in that very specific case.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoqemuBlockGetNamedNodeData: Extract 'data_file_raw' flag
Peter Krempa [Mon, 8 Sep 2025 16:09:57 +0000 (18:09 +0200)] 
qemuBlockGetNamedNodeData: Extract 'data_file_raw' flag

The 'data_file_raw' flag of qcow2 notifies that all data inside the
'data_file' is a raw image so can be used standalone without the
metadata without any problem (except for not updating the dirty
bitmaps).

Our migration safety checks will allow skipping the migration safety
check for these files as during migration we know it's safe to re-create
this on the destination in a location that isn't shared.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoqemuMigrationSrcIsSafeDisk: Check also data file properties for migrability
Peter Krempa [Tue, 9 Sep 2025 13:43:52 +0000 (15:43 +0200)] 
qemuMigrationSrcIsSafeDisk: Check also data file properties for migrability

If the qcow2 data file feature (which separates the data into a separate
file from the metadata) is in use the migration safety check ought to
consider both the metadata and the data file for safe migration.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoqemuMigrationSrcIsSafeDisk: Extract safe migration checks for one storage source
Peter Krempa [Mon, 8 Sep 2025 15:50:22 +0000 (17:50 +0200)] 
qemuMigrationSrcIsSafeDisk: Extract safe migration checks for one storage source

Further split up the code originally in 'qemuMigrationSrcIsSafe' to
separate checks concerning a single storage source.

The code will then be reused to check the safe migration state also for
the data file (qcow2 feature that allows store of data separated from
the qcow2 metadata).

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoqemuMigrationSrcIsSafe: Extract code for checking safe migrability of one disk
Peter Krempa [Mon, 8 Sep 2025 14:04:46 +0000 (16:04 +0200)] 
qemuMigrationSrcIsSafe: Extract code for checking safe migrability of one disk

Extract the code which checks a source of a single disk for safe
migratability into 'qemuMigrationSrcIsSafeDisk'.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoqemuMigrationSrcIsSafe: Drop 'DEBUG' message about qemu supporting cache dropping
Peter Krempa [Mon, 8 Sep 2025 13:59:57 +0000 (15:59 +0200)] 
qemuMigrationSrcIsSafe: Drop 'DEBUG' message about qemu supporting cache dropping

The feature exists for a long time, no need to add extra notice about
it.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agoci: regenerate with 'lcitool manifest'
Michal Privoznik [Mon, 22 Sep 2025 10:46:04 +0000 (12:46 +0200)] 
ci: regenerate with 'lcitool manifest'

This pulls in the fix for generating ENV vars in Dockerfile
according to latest standard.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
12 days agodocs/apps: Remove "Cuckoo Sandbox"
Sebastian Jensen [Mon, 22 Sep 2025 20:20:47 +0000 (20:20 +0000)] 
docs/apps: Remove "Cuckoo Sandbox"

Link pointed to a squatted domain, and the upstream repository on
GitHub has been archived since Apr 27, 2021:

https://github.com/cuckoosandbox/cuckoo
Signed-off-by: Ján Tomko <jtomko@redhat.com>
2 weeks agoTranslated using Weblate (Portuguese)
Américo Monteiro [Sun, 21 Sep 2025 09:59:49 +0000 (09:59 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 87.0% (9534 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 86.7% (9493 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 86.4% (9466 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
2 weeks agoTranslated using Weblate (Portuguese)
Américo Monteiro [Thu, 18 Sep 2025 00:51:57 +0000 (00:51 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 86.0% (9423 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
2 weeks agoTranslated using Weblate (Chinese (Simplified) (zh_CN))
jianqing yan [Tue, 16 Sep 2025 09:31:29 +0000 (09:31 +0000)] 
Translated using Weblate (Chinese (Simplified) (zh_CN))

Currently translated at 97.8% (10711 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/zh_CN/

Signed-off-by: jianqing yan <yanjianqing@kylinos.cn>
2 weeks agoTranslated using Weblate (Portuguese)
Américo Monteiro [Tue, 16 Sep 2025 09:31:29 +0000 (09:31 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 86.0% (9419 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 85.5% (9371 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 85.2% (9336 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 85.0% (9311 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
2 weeks agoTranslated using Weblate (Spanish)
Fco. Javier F. Serrador [Tue, 16 Sep 2025 09:31:28 +0000 (09:31 +0000)] 
Translated using Weblate (Spanish)

Currently translated at 75.7% (8294 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: "Fco. Javier F. Serrador" <fserrador@gmail.com>
2 weeks agoutil: remove glibcompat.c
Ján Tomko [Wed, 10 Sep 2025 08:03:01 +0000 (10:03 +0200)] 
util: remove glibcompat.c

There are no functions reimplemented here anymore.

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
2 weeks agobuild: bump minimum glib version to 2.68
Ján Tomko [Wed, 10 Sep 2025 07:48:41 +0000 (09:48 +0200)] 
build: bump minimum glib version to 2.68

We removed support for Debian 11 which only had 2.66.8.
Next stop: 2.72 after we drop Ubuntu 22.04

For libvirt, the update to the 2.68 GLib release:
* introduces g_string_replace
* deprecates g_memdup in favor of g_memdup2
* removes the need for some warning workarounds
* deprecates g_time_zone_new in favor of g_time_zone_new_identifier
  which returns NULL on error instead of returning UTC

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: Implement virConnectDomainEventDeregister()
Michal Privoznik [Thu, 11 Sep 2025 11:20:39 +0000 (13:20 +0200)] 
ch: Implement virConnectDomainEventDeregister()

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Implement virConnectDomainEventRegister()
Michal Privoznik [Fri, 12 Sep 2025 06:58:23 +0000 (08:58 +0200)] 
ch: Implement virConnectDomainEventRegister()

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Propagate lifecycle events
Michal Privoznik [Thu, 11 Sep 2025 11:20:24 +0000 (13:20 +0200)] 
ch: Propagate lifecycle events

We already have a thread that listens on cloud-hypervisor's
monitor for incoming events and processes them. What is missing
though, is emitting of corresponding lifecycle events.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Emit event on device attach
Michal Privoznik [Tue, 9 Sep 2025 14:00:37 +0000 (16:00 +0200)] 
ch: Emit event on device attach

When a device is detached from a running guest we ought to emit the
VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED event.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Emit event on device attach
Michal Privoznik [Tue, 9 Sep 2025 13:42:50 +0000 (15:42 +0200)] 
ch: Emit event on device attach

When a device is attached to a running guest we ought to emit the
VIR_DOMAIN_EVENT_ID_DEVICE_ADDED event.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Unlock domain in virCHEventStopProcess() on all exit paths
Michal Privoznik [Wed, 10 Sep 2025 09:43:53 +0000 (11:43 +0200)] 
ch: Unlock domain in virCHEventStopProcess() on all exit paths

The aim of virCHEventStopProcess() is to clean up after stopped
domain by calling virCHProcessStop(). But in order to do that it
needs to acquire a job and in order to do that it needs to lock
the domain object. Well, the object is not unlocked in all exit
paths, i.e. when job acquiring fails the domain object is left
locked.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Avoid memory leak in virCHProcessEvents()
Michal Privoznik [Wed, 10 Sep 2025 08:21:48 +0000 (10:21 +0200)] 
ch: Avoid memory leak in virCHProcessEvents()

The aim of virCHProcessEvents() is to read data (in JSON format)
from CH monitor and then process them. To parse incoming data
virJSONValueFromString() is used. But the corresponding
virJSONValue is freed only when processing of an even succeeds.
If processing an event fails, then the memory is not freed
leading to a memory leak.

334 (24 direct, 310 indirect) bytes in 1 blocks are definitely lost in loss record 1,975 of 2,040
   at 0x4919EF3: calloc (vg_replace_malloc.c:1675)
   by 0x4FEB249: g_malloc0 (in /usr/lib64/libglib-2.0.so.0.8400.3)
   by 0x4A66162: virJSONValueNewObject (virjson.c:533)
   by 0x4A67E74: virJSONValueFromJsonC (virjson.c:1413)
   by 0x4A681A5: virJSONValueFromString (virjson.c:1484)
   by 0xB8CD9D7: virCHProcessEvents (ch_events.c:179)
   by 0xB8CDCDC: virCHReadProcessEvents (ch_events.c:251)
   by 0xB8CDEBB: virCHEventHandlerLoop (ch_events.c:284)
   by 0x4AC1EB4: virThreadHelper (virthread.c:256)
   by 0x5441DE3: start_thread (in /usr/lib64/libc.so.6)
   by 0x54C25F3: clone (in /usr/lib64/libc.so.6)

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoTranslated using Weblate (Portuguese)
Américo Monteiro [Thu, 11 Sep 2025 09:29:03 +0000 (09:29 +0000)] 
Translated using Weblate (Portuguese)

Currently translated at 84.2% (9223 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 84.1% (9216 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 84.1% (9210 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 83.9% (9188 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 83.1% (9108 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 82.1% (8991 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 81.1% (8887 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
Translated using Weblate (Portuguese)

Currently translated at 80.6% (8831 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/pt/

Signed-off-by: Américo Monteiro <a_monteiro@gmx.com>
3 weeks agoTranslated using Weblate (Spanish)
Fco. Javier F. Serrador [Thu, 11 Sep 2025 09:29:03 +0000 (09:29 +0000)] 
Translated using Weblate (Spanish)

Currently translated at 73.5% (8050 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: "Fco. Javier F. Serrador" <fserrador@gmail.com>
Translated using Weblate (Spanish)

Currently translated at 73.4% (8037 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: "Fco. Javier F. Serrador" <fserrador@gmail.com>
Translated using Weblate (Spanish)

Currently translated at 72.6% (7957 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: "Fco. Javier F. Serrador" <fserrador@gmail.com>
3 weeks agoTranslated using Weblate (Spanish)
Weblate [Thu, 11 Sep 2025 09:29:03 +0000 (09:29 +0000)] 
Translated using Weblate (Spanish)

Currently translated at 72.6% (7957 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: Weblate <noreply-mt-weblate@weblate.org>
Translated using Weblate (Spanish)

Currently translated at 72.6% (7957 of 10948 strings)

Translation: libvirt/libvirt
Translate-URL: https://translate.fedoraproject.org/projects/libvirt/libvirt/es/

Signed-off-by: Weblate <noreply-mt-weblate@weblate.org>
3 weeks agoAdded translation using Weblate (Arabic)
joo es [Thu, 11 Sep 2025 09:29:02 +0000 (09:29 +0000)] 
Added translation using Weblate (Arabic)

Signed-off-by: joo es <jonnyse@users.noreply.translate.fedoraproject.org>
3 weeks agoconf: auto-add a pcie-root-port when needed while plugging in pcie-to-pci-bridge
Laine Stump [Mon, 25 Aug 2025 03:32:39 +0000 (23:32 -0400)] 
conf: auto-add a pcie-root-port when needed while plugging in pcie-to-pci-bridge

This will almost surely never come up during any normal operation[*],
which is likely why this wasn't done when pcie-to-pci-bridge support
was added back in the before-fore times. It's pretty simple to support
though - a pcie-to-pci-bridge plugs into a pcie-root-port just like
any other pcie device, and if there isn't an open slot on an existing
pcie-root-port, we can just add one.

([*] in real life, a pcie-to-pci-bridge is only auto-added by libvirt
itself, while this function is dealing with the followup to *user
added* devices. Also each pcie-to-pci-bridge has 32 slots, and it's
unlikely a domain with pcie support would be wanting more than 32
conventional PCI (i.e. not PCIe) devices)

Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoconf: improve error message when a PCI controller can't be auto-added
Laine Stump [Tue, 26 Aug 2025 18:41:32 +0000 (14:41 -0400)] 
conf: improve error message when a PCI controller can't be auto-added

Log a slightly different message when the missing-but-required slot is
conventional PCI vs PCIe. Also correct/improve the comments about why
auto-add of a PCI controller isn't supported when we're trying to
create a slot for various different pci controllers.

Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoconf: add forgotten clause to virDomainPCIControllerConectTypeToModel()
Laine Stump [Mon, 11 Aug 2025 06:11:25 +0000 (02:11 -0400)] 
conf: add forgotten clause to virDomainPCIControllerConectTypeToModel()

When building the PCI topology of a domain that has PCI devices with
no assigned PCI addresses, the function virDomainPCIAddressSetGrow()
will attempt to add a new PCI controller with the appropriate type of
slot to connect a device that doesn't have a PCI address.

In some cases this isn't possible (for example, if the device you are
attempting to add to the topology requires a type of connection only
provided by some controller that *itself* requires a connection of a
type not available for the given architecture/machinetype, e.g. if you
want to add a pcie-root-port to a domain with a machine type that has
a pci-root (no PCIE)). In those cases, an error message is logged by
using virDomainPCIControllerConectTypeToModel() to extract the type of
device from the "flags" that are sent to virDomainPCIAddressSetGrow().
However, if virDomainPCIControllerConectTypeToModel() doesn't find a
device type in the connection flags, it will return -1, and
virDomainPCIAddressSetGrow() will log the very generic:

   Cannot automatically add a new PCI bus for a device with connect flags nnnn

Both of these functions were written prior to libvirt adding support
for the pcie-to-pci-bridge controller, and when that support was added
(in 2018), a new if() clause wasn't added to
virDomainPCIControllerConectTypeToModel(). Seven (!) years later, this
omission was noticed by someone adding a new test case to regression
testing.

This patches remedies the earlier omission, so that now when someone
tries to add a pcie-to-pci-bridge controller to a domain that doesn't
have PCIE, the message will be:

  a PCI slot is needed to connect a PCI controller model='pcie-to-pci-bridge', but none is available, and it cannot be automatically added

This is still not an ideal error message, but is arguably better.

(NB: Unfortunately it isn't possible to use a switch() statement with
no default case (in order to catch a similar error in the future),
since we are converting from bitmapped flags. Fortunately, we haven't
needed to add a new PCI controller type in the last 7 1/2 years :-)

Resolves: https://issues.redhat.com/browse/RHEL-62032
Fixes: 542f05e7756cc5614eb2ee7b0bac9aabb7aa016c
Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoqemu: fix multiple missing setup/teardown of passt process for interface type='vhostuser'
Laine Stump [Sat, 23 Aug 2025 04:09:41 +0000 (00:09 -0400)] 
qemu: fix multiple missing setup/teardown of passt process for interface type='vhostuser'

passt networking support was originally added only for <interface
type='user'>, and all of the codepaths leading to qemuPasst*()
functions were protected with

   if (net->type == VIR_DOMAIN_NET_TYPE_USER &&
       net->backend.type == VIR_DOMAIN_NET_BACKEND_PASST)

When support was later added to use a vhost-user socket to connect
between the passt process and qemu process, *some* of the conditionals
similar to the above were changed to be

   if ((net->type == VIR_DOMAIN_NET_TYPE_USER ||
        net->type == VIR_DOMAIN_NET_TYPE_VHOSTUSER) &&
       net->backend.type == VIR_DOMAIN_NET_BACKEND_PASST)

As a matter of fact, enough of these places were changed to make
passt+vhostuser work. However I missed a few places that resulted in
the passt process not being properly shutdown/cleaned up when the
interface type was vhostuser, and also as far as I can see from
examining the code, the passt process wasn't being added to the cgroup
for the domain.

We could fix these problems by adding the extra condition to all the
missing places (checking for either 'user' or 'vhostuser' as well as
for backend type of 'passt'), but since validation already guarantees
that if backend type='passt' then the interface type MUST be either
'user' or 'vhostuser', it's really just adding extra code for no good
purpose (and would leave open the possibility of the same problem
recurring in the future if a different interface type begins using
passt as well). So the better solution is to not bother checking
net->type at all in those locations - if backend type is 'passt' then
we call the passt-related code.

Resolves: https://issues.redhat.com/browse/RHEL-80285
Resolves: https://issues.redhat.com/browse/RHEL-92842
Fixes: 1e9054b9c79d721a55f413c2983c5370044f8f60
Signed-off-by: Laine Stump <laine@redhat.com>
Reviewed-by: Martin Kletzander <mkletzan@redhat.com>
3 weeks agoqemu: support setting guest hostname/fqdn using DHCP on passt-backed interfaces
Enrique Llorente via Devel [Fri, 30 May 2025 12:21:23 +0000 (14:21 +0200)] 
qemu: support setting guest hostname/fqdn using DHCP on passt-backed interfaces

This commit introduces support for configuring hostnames in virtual
machines (VMs) using DHCP via an interface backed by the passt
transport. This is done with the new 'hostname' and 'fqdn' (Fully
Qualified Domain Name) attributes in the <backend> subelement of
<interface>. The values set in these attributes are added to the passt
commandline for the interface (with the --hostname and --fqdn
options), and passt will then send the settings to the guest by adding
options to the DHCP response when the interface is started - for IPv4,
hostname will be sent in option 12, or the FQDN will be sent in option
81, and for IPv6 the FQDN will be sent using option 39.

This will enable a management application to easily configure guest
hostnames without intervening in the guest's disk image (as long as
the guest uses DHCP for it's network interface configuration).

Here is an example of setting the hostname and fqdn for a guest (in
practice, you would only use one or the other, since according to the
RFC if option 81 is sent to the guest, option 12 should not be sent).

   <interface type='vhostuser'>
     <backend type='passt' hostname='bob' fqdn='bob.example.com'/>
     ...

Resolves: https://issues.redhat.com/browse/RHEL-79806
Signed-off-by: Enrique Llorente <ellorent@redhat.com>
Reviewed-by: Laine Stump <laine@redhat.com>
3 weeks agoch: Avoid memleak on disk detach in chDomainRemoveDevice()
Michal Privoznik [Tue, 9 Sep 2025 15:18:34 +0000 (17:18 +0200)] 
ch: Avoid memleak on disk detach in chDomainRemoveDevice()

The aim of chDomainRemoveDevice() is to remove device from
virDomainDef. Well, in case of disks this is done by calling
virDomainDiskRemove() which merely just removes it from the array
of virDomainDiskDef-s but leaves it up to the caller to actually
free the disk def.

1,286 (560 direct, 726 indirect) bytes in 1 blocks are definitely lost in loss record 2,005 of 2,041
   at 0x4919EF3: calloc (vg_replace_malloc.c:1675)
   by 0x4FEB249: g_malloc0 (in /usr/lib64/libglib-2.0.so.0.8400.3)
   by 0x4AFD9A4: virDomainDiskDefNewSource (domain_conf.c:2409)
   by 0x4B10ACA: virDomainDiskDefParseXML (domain_conf.c:8509)
   by 0x4B24F07: virDomainDeviceDefParse (domain_conf.c:14631)
   by 0xB8D8881: chDomainAttachDeviceLiveAndUpdateConfig (ch_hotplug.c:135)
   by 0xB8CCFE0: chDomainAttachDeviceFlags (ch_driver.c:2376)
   by 0xB8CD057: chDomainAttachDevice (ch_driver.c:2394)
   by 0x4DC1C7D: virDomainAttachDevice (libvirt-domain.c:8951)
   by 0x405E545: remoteDispatchDomainAttachDevice (remote_daemon_dispatch_stubs.h:3763)
   by 0x405E495: remoteDispatchDomainAttachDeviceHelper (remote_daemon_dispatch_stubs.h:3742)
   by 0x4BF3164: virNetServerProgramDispatchCall (virnetserverprogram.c:423)

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Drop useless variable in chDomainFindDisk()
Michal Privoznik [Tue, 9 Sep 2025 15:10:20 +0000 (17:10 +0200)] 
ch: Drop useless variable in chDomainFindDisk()

The 'disk' variable inside of chDomainFindDisk() is not used
really. Drop it.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Drop deadcode from chDomainDetachDeviceLive()
Michal Privoznik [Tue, 9 Sep 2025 14:01:18 +0000 (16:01 +0200)] 
ch: Drop deadcode from chDomainDetachDeviceLive()

At the end of chDomainDetachDeviceLive() there's a code that
tries to remove the disk that's being detached from the domain
definition. Well, it's a leftover from the original patch which I
forgot to remove when rewriting it to use chDomainRemoveDevice().
The disk is removed there so this code has no chance in removing
it again. Drop the code.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Actually remove device in chDomainDetachDeviceLive()
Michal Privoznik [Tue, 9 Sep 2025 15:10:36 +0000 (17:10 +0200)] 
ch: Actually remove device in chDomainDetachDeviceLive()

Inside of chDomainDetachDeviceLive() there are two variables that
are important in this case: 'match' and 'detach'. The first one
contains device definition as parsed from user provided XML, the
other contains pointer to the device definition inside
virDomainDef (as returned by chDomainFindDisk()).

Now, when chDomainRemoveDevice() is called, it looks up the
device inside virDomainDef and removes it (using pointer
comparison). Well, that means 'detach' must be passed as an
argument instead of 'match'.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Avoid memleak in virCHDriverConfigDispose()
Michal Privoznik [Tue, 9 Sep 2025 15:10:56 +0000 (17:10 +0200)] 
ch: Avoid memleak in virCHDriverConfigDispose()

When virCHDriverConfig struct is initialized in
virCHDriverConfigNew() the 'configDir' member is allocated but
corresponding free is missing in virCHDriverConfigDispose().
While at it, reorder the free calls to match the order in which
they are declared in the struct so it's easier to spot missing
free call.

20 bytes in 1 blocks are definitely lost in loss record 667 of 2,033
   at 0x4912888: malloc (vg_replace_malloc.c:446)
   by 0x5436747: __vasprintf_internal (in /usr/lib64/libc.so.6)
   by 0x503EC81: g_vasprintf (in /usr/lib64/libglib-2.0.so.0.8400.3)
   by 0x500805B: g_strdup_vprintf (in /usr/lib64/libglib-2.0.so.0.8400.3)
   by 0x5008124: g_strdup_printf (in /usr/lib64/libglib-2.0.so.0.8400.3)
   by 0xB8C2B70: virCHDriverConfigNew (ch_conf.c:181)
   by 0xB8C9DDA: chStateInitialize (ch_driver.c:1456)
   by 0x4D9E316: virStateInitialize (libvirt.c:667)
   by 0x40539DB: daemonRunStateInit (remote_daemon.c:581)
   by 0x4AC1EB4: virThreadHelper (virthread.c:256)
   by 0x5441DE3: start_thread (in /usr/lib64/libc.so.6)
   by 0x54C25F3: clone (in /usr/lib64/libc.so.6)

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Peter Krempa <pkrempa@redhat.com>
3 weeks agoch: Implement VIR_DOMAIN_DESTROY_GRACEFUL flag support
Michal Privoznik [Tue, 9 Sep 2025 11:39:46 +0000 (13:39 +0200)] 
ch: Implement VIR_DOMAIN_DESTROY_GRACEFUL flag support

The virDomainDestroyFlags() API has several flags, including
VIR_DOMAIN_DESTROY_GRACEFUL which is documented to send only
SIGTERM to the emulator process. Implement its support into CH
driver.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Introduce flags to virCHProcessStop()
Michal Privoznik [Tue, 9 Sep 2025 13:22:07 +0000 (15:22 +0200)] 
ch: Introduce flags to virCHProcessStop()

A caller (e.g. chDomainDestroyFlags()) might want to chose
whether to kill emulator process forcefully or gracefully (the
@force argument of virProcessKillPainfully()). Invent a flag to
virCHProcessStop() for this. And to keep consistent behaviour,
pass the flag everywhere for now.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoch: Make sure the cloud-hypervisor process is killed in virCHProcessStop()
Michal Privoznik [Tue, 9 Sep 2025 10:49:30 +0000 (12:49 +0200)] 
ch: Make sure the cloud-hypervisor process is killed in virCHProcessStop()

Currently, virCHProcessStop() is called either when the
cloud-hypervisor process dies gracefully (e.g. on shutdown
initiated from within the guest) or when virDomainDestroy() is
called (or on failed start attempt, but that's not important
right now).

At any rate, if the cloud-hypervisor process is running it's not
a child process of libvirtd rather than the init (per
virCommandDaemonize() called inside of virCHMonitorNew()). This
distinction is important because virCHProcessStop() then calls
virProcessAbort() thinking it'll kill the process. Well,
virProcessAbort() works only on child processes.

Switch to virProcessKillPainfully() which does work in such
cases.

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agovirprocess: Report errno if virProcessAbort() fails
Michal Privoznik [Tue, 9 Sep 2025 11:09:34 +0000 (13:09 +0200)] 
virprocess: Report errno if virProcessAbort() fails

The aim of virProcessAbort() is to reap a child process. It does
so by waitpid()-ing and possibly sending SIGTERM/SIGKILL to the
child process (and waitpid()-ing again). Nevertheless, if
everything fails a debug message is printed. But the message
mentions only the PID and not errno (set by previous waitpid())
which may be useful. For instance when virProcessAbort() is
called over a PID that's not our child:

  failed to reap child 16325, abandoning it: No child processes

Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoconf: clear the acpiNodeset field after freeing
Daniel P. Berrangé [Tue, 9 Sep 2025 09:26:20 +0000 (10:26 +0100)] 
conf: clear the acpiNodeset field after freeing

The virDomainDeviceInfoClear method does not free the struct, only
its contents, so all pointer fields must be explicitly set to NULL
after releasing to avoid disk of double-free.

Reported by coverity:

  *** CID 895678:         Memory - corruptions  (USE_AFTER_FREE)
  /src/conf/domain_conf.c: 5926             in virDomainDeviceInfoParseXML()
  5920             goto cleanup;
  5921
  5922
  5923         ret = 0;
  5924      cleanup:
  5925         if (ret < 0)
  >>>     CID 895678:         Memory - corruptions  (USE_AFTER_FREE)
  >>>     Calling "virDomainDeviceInfoClear" frees pointer "info->acpiNodeset" which has already been freed.
  5926             virDomainDeviceInfoClear(info);
  5927         return ret;
  5928     }
  5929
  5930     static int
  5931     virDomainHostdevSubsysUSBDefParseXML(xmlNodePtr node,

Reviewed-by: Peter Krempa <pkrempa@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
3 weeks agoqemu: block: Always enable discard forwarding for 'throttle' filter layer
Peter Krempa [Fri, 5 Sep 2025 08:10:12 +0000 (10:10 +0200)] 
qemu: block: Always enable discard forwarding for 'throttle' filter layer

Discards ought to be forwarded to the protocol nodes where we control
if discard actually happens.

Unconditionally enable discard='unmap' for the intermediate layer.

Closes: https://gitlab.com/libvirt/libvirt/-/issues/810
Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agodatatypes: Refactor rest of 'virGet*' helpers
Peter Krempa [Wed, 27 Aug 2025 06:36:08 +0000 (08:36 +0200)] 
datatypes: Refactor rest of 'virGet*' helpers

Similarly to the refactor of 'virGetDomain' done in commit 3de56902d32
rework the code to assume that 'virObjectNew' can't return NULL and use
the 'virCheck*Return' helpers to avoid an 'error:' label.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agodatatypes: virGetStream: Add missing 'virCheckConnectReturn' check
Peter Krempa [Wed, 27 Aug 2025 06:41:43 +0000 (08:41 +0200)] 
datatypes: virGetStream: Add missing 'virCheckConnectReturn' check

The 'virGet*' helpers check that the passed objects which are used to
construct the new object are valid. The check that the 'conn' object in
'virStreamGet' was missing.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
3 weeks agoNEWS: Mention new acpi-generic-initiator support
Andrea Righi [Sat, 6 Sep 2025 13:09:03 +0000 (15:09 +0200)] 
NEWS: Mention new acpi-generic-initiator support

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agodocs: Document acpi nodeset in hostdev
Andrea Righi [Sat, 6 Sep 2025 13:09:02 +0000 (15:09 +0200)] 
docs: Document acpi nodeset in hostdev

Add documentation for the new <acpi nodeset="..."> element in hostdev,
which allows associating devices with ACPI Generic Initiator objects in
QEMU.

A typical use case is NVIDIA Multi-Instance GPU (MIG), where a physical
GPU is partitioned into multiple isolated instances, each tied to one or
more virtual NUMA nodes. The documentation includes an example showing
how to configure <numa> cells together with a MIG device.

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoqemu: Add acpi-generic-initiator unit test
Andrea Righi [Sat, 6 Sep 2025 13:09:01 +0000 (15:09 +0200)] 
qemu: Add acpi-generic-initiator unit test

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoqemu: Generate acpi-generic-initiator command from acpi nodeset
Andrea Righi [Sat, 6 Sep 2025 13:09:00 +0000 (15:09 +0200)] 
qemu: Generate acpi-generic-initiator command from acpi nodeset

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoqemu: Validate acpi nodeset
Andrea Righi [Sat, 6 Sep 2025 13:08:59 +0000 (15:08 +0200)] 
qemu: Validate acpi nodeset

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoconf: Add nodeset attribute to the <acpi> element
Andrea Righi [Sat, 6 Sep 2025 13:08:58 +0000 (15:08 +0200)] 
conf: Add nodeset attribute to the <acpi> element

This enables partitioning of PCI devices into multiple isolated
instances, each requiring a dedicated virtual NUMA node definition.

Link: https://mail.gnu.org/archive/html/qemu-arm/2024-03/msg00358.html
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoqemu: Allow to define NUMA nodes without memory or CPUs assigned
Andrea Righi [Sat, 6 Sep 2025 13:08:57 +0000 (15:08 +0200)] 
qemu: Allow to define NUMA nodes without memory or CPUs assigned

Allow to define NUMA nodes without memory or CPUs assigned to properly
support the new acpi-generic-initiator device.

This is required because the NUMA nodes passed to the
acpi-generic-initiator object must be independent and not be shared with
other resources, such as CPU or memory.

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoqemu: capabilies: Introduce QEMU_CAPS_ACPI_GENERIC_INITIATOR
Andrea Righi [Sat, 6 Sep 2025 13:08:56 +0000 (15:08 +0200)] 
qemu: capabilies: Introduce QEMU_CAPS_ACPI_GENERIC_INITIATOR

This capability tracks whether QEMU supports the acpi-generic-initiator
object type.

This object has been introduced in QEMU with the commit:
b64b7ed8bb ("qom: new object to associate device to NUMA node").

Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Andrea Righi <arighi@nvidia.com>
3 weeks agoNEWS: announce disk hotplug support for ch
Stefan Kober [Thu, 4 Sep 2025 12:10:35 +0000 (14:10 +0200)] 
NEWS: announce disk hotplug support for ch

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: implement disk device detach in public API
Stefan Kober [Thu, 4 Sep 2025 12:10:34 +0000 (14:10 +0200)] 
ch: implement disk device detach in public API

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add disk detach helper functions
Stefan Kober [Mon, 8 Sep 2025 12:56:04 +0000 (14:56 +0200)] 
ch: add disk detach helper functions

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add virCHMonitorRemoveDevice function
Stefan Kober [Thu, 4 Sep 2025 12:10:33 +0000 (14:10 +0200)] 
ch: add virCHMonitorRemoveDevice function

The function calls the respective CH API to remove a device of any type
from a VM.

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add virCHMonitorBuildKeyValueJson
Stefan Kober [Thu, 4 Sep 2025 12:10:32 +0000 (14:10 +0200)] 
ch: add virCHMonitorBuildKeyValueJson

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: implement disk attach in public API
Stefan Kober [Thu, 4 Sep 2025 12:10:30 +0000 (14:10 +0200)] 
ch: implement disk attach in public API

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add disk attach helper functions
Stefan Kober [Thu, 4 Sep 2025 12:10:29 +0000 (14:10 +0200)] 
ch: add disk attach helper functions

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add monitor disk attach logic
Stefan Kober [Thu, 4 Sep 2025 12:10:28 +0000 (14:10 +0200)] 
ch: add monitor disk attach logic

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add/use virCHMonitorPut function
Stefan Kober [Thu, 4 Sep 2025 12:10:27 +0000 (14:10 +0200)] 
ch: add/use virCHMonitorPut function

This allows users to call API endpoints that require passing data in a
generic way. Previously, only virCHMonitorPutNoContent was offered.

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: refactor virCHMonitorBuildDiskJson
Stefan Kober [Thu, 4 Sep 2025 12:10:26 +0000 (14:10 +0200)] 
ch: refactor virCHMonitorBuildDiskJson

Refactor BuildDiskJson to return a virJSONValue instead of adding the
disk json to an json array. This makes the function reusable for
hotplugging disks.

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: pass disk alias to CHV
Stefan Kober [Thu, 4 Sep 2025 12:10:24 +0000 (14:10 +0200)] 
ch: pass disk alias to CHV

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: assign aliases in ProcessPrepareDomain
Stefan Kober [Thu, 4 Sep 2025 12:10:31 +0000 (14:10 +0200)] 
ch: assign aliases in ProcessPrepareDomain

This is required to have unique device aliases for devices throughout
the domain lifecycle.

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add ch_alias.{c,h} for device alias handling
Stefan Kober [Thu, 4 Sep 2025 12:10:25 +0000 (14:10 +0200)] 
ch: add ch_alias.{c,h} for device alias handling

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoch: add ch_hotplug.{h,c} files to CH build
Stefan Kober [Thu, 4 Sep 2025 12:10:23 +0000 (14:10 +0200)] 
ch: add ch_hotplug.{h,c} files to CH build

The files are meant to contain all device hotplug related code. The
first implementation will be live storage attach and detach.

On-behalf-of: SAP stefan.kober@sap.com
Signed-off-by: Stefan Kober <stefan.kober@cyberus-technology.de>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
3 weeks agoesx: pass 'long' to curl_easy_setopt when needed
Ján Tomko [Tue, 2 Sep 2025 12:04:40 +0000 (14:04 +0200)] 
esx: pass 'long' to curl_easy_setopt when needed

The include header got its type checks fixed in curl 8.14:
https://github.com/curl/curl/commit/79b4e56b3f30dc1ac28a81128a07d27338e5219e
https://github.com/curl/curl/pull/17143

This causes a warning on rawhide with clang:
../src/esx/esx_vi.c:318:5: error: call to '_curl_easy_setopt_err_long'
declared with 'warning' attribute: curl_easy_setopt expects a long
argument [-Werror,-Wattribute-warning]
  318 |     curl_easy_setopt(curl->handle, CURLOPT_NOSIGNAL, 1);
      |     ^

Signed-off-by: Ján Tomko <jtomko@redhat.com>
Reviewed-by: Peter Krempa <pkrempa@redhat.com>
3 weeks agoqemu: Don't query unavailable-features if qom-list-get is supported
Jiri Denemark [Thu, 4 Sep 2025 13:49:01 +0000 (15:49 +0200)] 
qemu: Don't query unavailable-features if qom-list-get is supported

With qom-list-get we already have the value of unavailable-features
property in the returned object (just like we have all values of all
bool properties). Let's use the value from there instead of querying for
it separately using qom-get.

After this patch only a single QMP command is used for getting all the
required info about guest CPUs created by QEMU 10.1 or newer.

Signed-off-by: Jiri Denemark <jdenemar@redhat.com>
Reviewed-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>