[pve-devel] [PATCH installer] assistant: fix spelling and precise text in help usage output

2024-04-25 Thread Alexander Zeidler
Signed-off-by: Alexander Zeidler --- proxmox-auto-install-assistant/src/main.rs | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/proxmox-auto-install-assistant/src/main.rs b/proxmox-auto-install-assistant/src/main.rs index 9bc083e..0debd29 100644 ---

[pve-devel] [PATCH installer] install module: getters: correctly use plural in error messages

2024-04-25 Thread Alexander Zeidler
Signed-off-by: Alexander Zeidler --- Proxmox/Install.pm | 8 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Proxmox/Install.pm b/Proxmox/Install.pm index 6ad9d17..c0f8955 100644 --- a/Proxmox/Install.pm +++ b/Proxmox/Install.pm @@ -255,7 +255,7 @@ sub get_zfs_raid_setup {

[pve-devel] [PATCH container] fix #5414: use proper percentages in `pct df`

2024-04-25 Thread Fabian Grünbichler
while some people write percentages as 0.XX , putting a % next to that is just confusing. also, combined with the format modifier this would be rather lossy, and also not match regular `df` output.. Signed-off-by: Fabian Grünbichler --- src/PVE/CLI/pct.pm | 2 +- 1 file changed, 1 insertion(+),

Re: [pve-devel] [PATCH qemu-server v8 1/3] add C program to get hardware capabilities from CPUID

2024-04-25 Thread Stefan Sterz
On Thu Apr 25, 2024 at 1:24 PM CEST, Markus Frank wrote: > Implement a systemd service that runs a C program that extracts AMD > SEV hardware information such as reduced-phys-bios and cbitpos from > CPUID at boot time, looks if SEV, SEV-ES & SEV-SNP are enabled, and > outputs these details as JSON

[pve-devel] [PATCH docs v8 3/3] add AMD SEV documentation

2024-04-25 Thread Markus Frank
add documentation for the "[PATCH qemu-server] config: add AMD SEV support" patch. Signed-off-by: Markus Frank --- v8: * adjust changed parameter names in examples v5: * removed NodeConfig part v4: * added text that SEV-ES is experimental qm.adoc | 103

[pve-devel] [PATCH qemu-server v8 1/3] add C program to get hardware capabilities from CPUID

2024-04-25 Thread Markus Frank
Implement a systemd service that runs a C program that extracts AMD SEV hardware information such as reduced-phys-bios and cbitpos from CPUID at boot time, looks if SEV, SEV-ES & SEV-SNP are enabled, and outputs these details as JSON to /run/qemu-server/hw-params.json. This programm can also be

[pve-devel] [PATCH qemu-server v8 2/3] config: add AMD SEV support

2024-04-25 Thread Markus Frank
This patch is for enabling AMD SEV (Secure Encrypted Virtualization) support in QEMU. VM-Config-Examples: amd_sev: type=std,no-debug=1,no-key-sharing=1 amd_sev: es,no-debug=1,kernel-hashes=1 kernel-hashes, reduced-phys-bios & cbitpos correspond to the variables with the same name in QEMU.

[pve-devel] [PATCH pve-network 1/1] vnets : add ports isolation

2024-04-25 Thread Alexandre Derumier via pve-devel
--- Begin Message --- Add support for bridge ports isolation https://github.com/torvalds/linux/commit/7d850abd5f4edb1b1ca4b4141a4453305736f564 This allow to drop traffic between all ports having isolation enabled on the local bridge, but allow traffic with non isolated ports. Here,we isolate

[pve-devel] [PATCH pve-common 1/1] tap_plug: add support for bridge port isolation

2024-04-25 Thread Alexandre Derumier via pve-devel
--- Begin Message --- This is allow to block traffic/isolation traffic between all ports on the bridge with isolation (so between the vms), ans still allow incoming traffic from uplink. Signed-off-by: Alexandre Derumier --- src/PVE/Network.pm | 14 -- 1 file changed, 12

[pve-devel] [PATCH pve-network/pve-common/pve-manager] fix #4300 : sdn: add bridge ports isolation

2024-04-25 Thread Alexandre Derumier via pve-devel
--- Begin Message --- This patches series add support for sdn vnet bridge ports isolation pve-network: Alexandre Derumier (1): vnets : add ports isolation src/PVE/Network/SDN/VnetPlugin.pm | 5 + src/PVE/Network/SDN/Zones/Plugin.pm | 1 + 2 files changed, 6 insertions(+) pve-common:

[pve-devel] [PATCH pve-manager 1/1] sdn: vnet: add ports-isolation option.

2024-04-25 Thread Alexandre Derumier via pve-devel
--- Begin Message --- also move vlan-aware in advanced section Signed-off-by: Alexandre Derumier --- www/manager6/sdn/VnetEdit.js | 12 1 file changed, 12 insertions(+) diff --git a/www/manager6/sdn/VnetEdit.js b/www/manager6/sdn/VnetEdit.js index cdd83ed4..a00f83e6 100644 ---

[pve-devel] applied: [PATCH container] fix #5414: use proper percentages in `pct df`

2024-04-25 Thread Thomas Lamprecht
Am 25/04/2024 um 09:40 schrieb Fabian Grünbichler: > while some people write percentages as 0.XX , putting a % next to that is just > confusing. also, combined with the format modifier this would be rather lossy, > and also not match regular `df` output.. > Fixes: c6b5965 ("added 'pct df'")

[pve-devel] [PATCH qemu 1/4] makefile: adapt firmware blob removal to changes for QEMU 8.2

2024-04-25 Thread Fiona Ebner
Namely, it's also necessary to remove .dts source files from the meson.build file, because the .dtb file names are not directly listed anymore since commit 6e0dc9d2a8 ("meson: compile bundled device trees"). The same commit also introduced a "'.dtb'" in a line not just listing a file name and

[pve-devel] applied-series: [PATCH installer] install module: getters: correctly use plural in error messages

2024-04-25 Thread Thomas Lamprecht
Am 25/04/2024 um 10:40 schrieb Alexander Zeidler: > Signed-off-by: Alexander Zeidler > --- > Proxmox/Install.pm | 8 > 1 file changed, 4 insertions(+), 4 deletions(-) > > applied both patches, thanks! ___ pve-devel mailing list

[pve-devel] [PATCH-SERIES qemu] update to QEMU 9.0.0

2024-04-25 Thread Fiona Ebner
QEMU 8.2.2 required many changes, in particular to the alloc-track block driver. It should be the same as [0] just with backup fleecing patches added in. See the patch for details. The only bigger change in QEMU 9.0.0 is that the AioContext locking was removed, and it just required dropping the

[pve-devel] [PATCH qemu 2/4] makefile: also filter 64-bit hppa ROM for QEMU 8.2

2024-04-25 Thread Fiona Ebner
Same rationale as 6facdf3 ("also exclude hppa-firmware.img ROM from build"), not used by Proxmox VE and would cause a failure during build. Signed-off-by: Fiona Ebner --- Makefile | 1 + 1 file changed, 1 insertion(+) diff --git a/Makefile b/Makefile index a719e43..f23b041 100644 ---

[pve-devel] [PATCH proxmox-firewall] config: nftables: add support for icmp-type any

2024-04-25 Thread Stefan Hanreich
We support any as wildcard for matching all icmp types. Implement parsing logic for parsing the any value and support converting the any value into an nftables expression. Signed-off-by: Stefan Hanreich --- proxmox-nftables/src/expression.rs | 2 ++

[pve-devel] [PATCH proxmox-firewall] firewall: improve error handling of firewall

2024-04-25 Thread Stefan Hanreich
Error handling of the firewall binary should now be much more robust on configuration errors. Instead of panicking in some cases it should now log an error. Signed-off-by: Stefan Hanreich --- proxmox-firewall/src/bin/proxmox-firewall.rs | 7 +- proxmox-firewall/src/config.rs |

[pve-devel] [PATCH proxmox-firewall] config: macros: add SPICEproxy macro

2024-04-25 Thread Stefan Hanreich
Signed-off-by: Stefan Hanreich --- proxmox-ve-config/resources/macros.json | 9 + 1 file changed, 9 insertions(+) diff --git a/proxmox-ve-config/resources/macros.json b/proxmox-ve-config/resources/macros.json index 67e1d89..2fcc0fb 100644 --- a/proxmox-ve-config/resources/macros.json

[pve-devel] applied: [PATCH proxmox-firewall] config: nftables: add support for icmp-type any

2024-04-25 Thread Thomas Lamprecht
Am 25/04/2024 um 19:16 schrieb Stefan Hanreich: > We support any as wildcard for matching all icmp types. Implement > parsing logic for parsing the any value and support converting the any > value into an nftables expression. > > Signed-off-by: Stefan Hanreich > --- >

[pve-devel] applied: [PATCH proxmox-firewall] firewall: improve error handling of firewall

2024-04-25 Thread Thomas Lamprecht
Am 25/04/2024 um 19:23 schrieb Stefan Hanreich: > Error handling of the firewall binary should now be much more robust > on configuration errors. Instead of panicking in some cases it should > now log an error. > > Signed-off-by: Stefan Hanreich > --- >

[pve-devel] applied: [PATCH proxmox-firewall] config: macros: add SPICEproxy macro

2024-04-25 Thread Thomas Lamprecht
Am 25/04/2024 um 19:16 schrieb Stefan Hanreich: > Signed-off-by: Stefan Hanreich > --- > proxmox-ve-config/resources/macros.json | 9 + > 1 file changed, 9 insertions(+) > > applied, thanks! ___ pve-devel mailing list