Your message dated Mon, 15 Dec 2025 20:40:52 +0000
with message-id <[email protected]>
and subject line Bug#1041533: fixed in qemu 1:10.1.3+ds-1
has caused the Debian Bug report #1041533,
regarding xen-system-amd64: Xen fails to start hvm type VMs when a vncpasswd is
set
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1041533: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1041533
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: xen-system-amd64
Version: 4.17.1+2-gb773c48e36-1
Severity: important
Dear Maintainer,
after upgrading my bullseye server to bookworm I ran into the issue that all
VMs of type hvm are not starting anymore.
xl throws an error:
libxl: error: libxl_qmp.c:1399:qmp_ev_fd_callback: Domain 8:error on QMP
socket: Connection reset by peer
libxl: error: libxl_qmp.c:1438:qmp_ev_fd_callback: Domain 8:Error happened with
the QMP connection to QEMU
libxl: error: libxl_dm.c:3371:device_model_postconfig_done: Domain 8:Post DM
startup configs failed, rc=-26
libxl: error: libxl_create.c:1896:domcreate_devmodel_started: Domain 8:device
model did not start: -26
libxl: error: libxl_aoutils.c:646:libxl__kill_xs_path: Device Model already
exited
libxl: error: libxl_domain.c:1183:libxl__destroy_domid: Domain 8:Non-existant
domain
libxl: error: libxl_domain.c:1137:domain_destroy_callback: Domain 8:Unable to
destroy guest
libxl: error: libxl_domain.c:1064:domain_destroy_cb: Domain 8:Destruction of
domain failed
I started digging around in this QMP stuff and installed Xen freshly on another
server with the actual bookworm iso, but the problem is the same there, too.
After reading the log of the VM I found this error:
xen-qemu-system-i386: -vnc 172.17.2.3:1,password=on,to=99: Cipher backend does
not support DES algorithm
When disabling the vncpassword (and keeping the rest of the VM configuration
untouched), xl is able to launch the VM properly.
I searched around for a while but I did not find any configuration option for
choosing the cipher used by vnc.
Running vnc without password is a potential security risk.
I hope you have a clue to either fix this or extend the documentation on this.
Best regards
Claus
-- System Information:
Debian Release: 12.0
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-10-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages xen-system-amd64 depends on:
ii xen-hypervisor-4.17-amd64 4.17.1+2-gb773c48e36-1
ii xen-hypervisor-common 4.17.1+2-gb773c48e36-1
ii xen-utils-4.17 4.17.1+2-gb773c48e36-1
xen-system-amd64 recommends no packages.
xen-system-amd64 suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: qemu
Source-Version: 1:10.1.3+ds-1
Done: Michael Tokarev <[email protected]>
We believe that the bug you reported is fixed in the latest version of
qemu, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Michael Tokarev <[email protected]> (supplier of updated qemu package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 15 Dec 2025 17:45:49 +0300
Source: qemu
Architecture: source
Version: 1:10.1.3+ds-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QEMU Team <[email protected]>
Changed-By: Michael Tokarev <[email protected]>
Closes: 1041533
Changes:
qemu (1:10.1.3+ds-1) unstable; urgency=medium
.
[ Michael Tokarev ]
* new upstream stable/bugfix release 10.1.3
* d/qemu-user.postinst: add the forgotten `set -e'
* d/rules: enable vnc-sasl and vnc password (through nettle)
for xen build (Closes: #1041533)
* remove patches applied upstream:
- linux-user-use-correct-type-for-FIBMAP-and-FIGETBSZ.patch
- tcg-arm-fix-tgen_deposit.patch
.
[ Heinrich Schuchardt ]
* d/rules: reword build-vdso comment
Checksums-Sha1:
cf71356f8e4954281f43079c5fbf96830b7fbd39 12365 qemu_10.1.3+ds-1.dsc
e4ca353cfdf02036aadcec9f1f5eb9285c9e2880 40228008 qemu_10.1.3+ds.orig.tar.xz
c4a146ecb6024abecd4477724f581f80c0c604ff 124988 qemu_10.1.3+ds-1.debian.tar.xz
84d8c4ef31b8dbebd6f63a0392c68e243d290e21 7753 qemu_10.1.3+ds-1_source.buildinfo
Checksums-Sha256:
870de396b029bdc85275d03c6fc860a5856e272cfaf4491f528dba2f87cab0cb 12365
qemu_10.1.3+ds-1.dsc
036a929d154f334026dca7e3bc8f8111747e66a420d99ba6ae3525d7c029221b 40228008
qemu_10.1.3+ds.orig.tar.xz
73d0e1112a05a0fba20f865c03d34732254993abfef3f4dae6df9266ed930cd7 124988
qemu_10.1.3+ds-1.debian.tar.xz
6957bc85d585654b5d3032a2d55127e5252bacade1a41b481a0bf7e7d9b57e51 7753
qemu_10.1.3+ds-1_source.buildinfo
Files:
a51dad41f18552e26d3264d36034a39b 12365 otherosfs optional qemu_10.1.3+ds-1.dsc
bb2b06da824e29f4a27e50ef1fe0a3d2 40228008 otherosfs optional
qemu_10.1.3+ds.orig.tar.xz
0a3c91e89479aa315059929aba138562 124988 otherosfs optional
qemu_10.1.3+ds-1.debian.tar.xz
ee747872ef6e772250859e5a8aedec59 7753 otherosfs optional
qemu_10.1.3+ds-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=0haq
-----END PGP SIGNATURE-----
pgpbW3HkNpUtI.pgp
Description: PGP signature
--- End Message ---
